Location
Search the Archives
When a breach happens, what does your state actually require? 50 questions applied to 51 jurisdictions reveal how notification laws vary on timing, covered data, and consumer remedies.

Data Breach Notification Laws: A 50-State Survey (2026 Edition)

This survey analyzes and compares data breach notification laws across all 50 U.S. states and the District of Columbia. Using a standardized framework of 50 questions, we examined each jurisdiction's requirements for breach notification timing, covered data types, notification recipients, enforcement mechanisms, and consumer remedies.

The survey reflects statutes enacted as of January 1, 2026.
light blue background of a book shelf with a picket sign on the right that says amplify your voice and a hand holding a bullhorn at the bottom right and another hand holding a magnifying glass on the bottom left with the work law in the glass

Privacy Rights Clearinghouse and Coalition urge lawmakers to oppose CRA resolution targeting consumer protections for payment apps

Privacy Rights Clearinghouse, alongside a coalition of civil rights, consumer, and privacy organizations, strongly opposes the Congressional Review Act (CRA) resolution S.J. Res 28, which would roll back vital consumer protections for digital payment apps. This resolution threatens to remove essential oversight that helps ensure the safety and security of millions of users who rely on these apps daily. We urge Senators to reject this resolution and protect consumers from increased vulnerability to fraud, misuse of sensitive personal data, and unjust account freezes or deactivations.