This survey analyzes and compares data breach notification laws across all 50 U.S. states and the District of Columbia. Using a standardized framework of 50 questions, we examined each jurisdiction's requirements for breach notification timing, covered data types, notification recipients, enforcement mechanisms, and consumer remedies.
The survey reflects statutes enacted as of January 1, 2026.
The survey reflects statutes enacted as of January 1, 2026.
Governor Newsom signs SB 361, AB 566, AB 656, and SB 446, advancing browser controls, data broker transparency, social media account deletion, and breach notification
Hundreds of data brokers have not registered with state consumer protection agencies. These findings come as more states are passing data broker transparency laws that require brokers to provide information about their business and, in some cases, give consumers an easy way to opt out.
We are joining 40+ consumer, civil rights, housing, and privacy organizations in urging the Consumer Financial Protection Bureau to maintain and continue its Consumer Complaint Intake System in the face of pressures to eliminate this vital consumer protection tool.