This survey analyzes and compares data breach notification laws across all 50 U.S. states and the District of Columbia. Using a standardized framework of 50 questions, we examined each jurisdiction's requirements for breach notification timing, covered data types, notification recipients, enforcement mechanisms, and consumer remedies.
The survey reflects statutes enacted as of January 1, 2026.
The survey reflects statutes enacted as of January 1, 2026.
On March 3, Meghan Land will present PRC's report Paying Twice to Learn with Ariel Fox Johnson, Principal, Digital Smarts Law & Policy, at the Northeast OER Summit. They will discuss the report's findings and ways in which OER and privacy advocates might work together to improve student experiences with digital courseware.