The general definition of “personal information” or “PI” used in the majority of statutes is: An individual’s first name or first initial and last name plus one or more of following data elements: (i) Social Security number, (ii) driver’s license number or state-issued ID card number, (iii) account number, credit card number or debit card number combined with any security code, access code, PIN or password needed to access an account and generally applies to computerized data that includes PI. When a statute varies from that definition, it will be pointed out and highlighted in the chart.
As of April 15, 2014, only Alabama, New Mexico and South Dakota have no laws related to security breach notification. [NOTE: THE KENTUCKY LAW IS EFFECTIVE JULY 1]
This chart provides general information and not legal advice regarding any specific facts or circumstances.
Please see full chart below for more information.
Firefox recommends the PDF Plugin for Mac OS X for viewing PDF documents in your browser.
We can also show you Legal Updates using the Google Viewer; however, you will need to be logged into Google Docs to view them.
Please choose one of the above to proceed!
LOADING PDF: If there are any problems, click here to download the file.