In 2025, the Data Breach Chronology captured 8,019 data breach notification filings from state and federal agencies that publish breach reports. These represented 4,080 unique breach events impacting at least 375 million individuals. This report examines what those 4,080 breaches tell us about the state of data security, and where the gaps in breach reporting leave consumers in the dark.
This survey analyzes and compares data breach notification laws across all 50 U.S. states and the District of Columbia. Using a standardized framework of 50 questions, we examined each jurisdiction's requirements for breach notification timing, covered data types, notification recipients, enforcement mechanisms, and consumer remedies.
The survey reflects statutes enacted as of January 1, 2026.
The survey reflects statutes enacted as of January 1, 2026.
Governor Newsom signs SB 361, AB 566, AB 656, and SB 446, advancing browser controls, data broker transparency, social media account deletion, and breach notification
Hundreds of data brokers have not registered with state consumer protection agencies. These findings come as more states are passing data broker transparency laws that require brokers to provide information about their business and, in some cases, give consumers an easy way to opt out.
We're proud to stand with Consumer Reports in supporting Senator Becker's SB 361 to improve the registration and transparency requirements of the California Delete Act.
If you're a survivor of domestic violence, both federal and state laws offer important privacy protections to help keep you safe in your housing.
The California Invasion of Privacy Act (CIPA) protects Californians against unauthorized interception, recording, and eavesdropping on private communications, conversations, or telephone calls. It provides individuals with robust privacy protections for electronic and oral communications.
Privacy Rights Clearinghouse, alongside civil rights, consumer advocates, and privacy organizations, urges support for California Assembly Bill 446 (AB 446), legislation designed to ban the unfair practice of "surveillance pricing." Surveillance pricing occurs when businesses use personal consumer data, such as browsing history, location, or past purchases, to set individualized prices, resulting in unfair price discrimination.