Davis Wright Tremaine’s Privacy & Security practice group maintains this summary of the 47 state data breach notification statutes. The summary should help answer questions about state data breach notification requirements but it is not intended to provide legal advice, which can only be given in response to inquiries regarding particular situations.

Please note that several states have amended their respective data breach notification statutes during the 2016 legislative session. These amendments may affect or modify any current data breach notification requirements. DWT’s State Data Breach Notification Summaries will be updated as these amendments go into effect. Please refer to the last revised date on each summary page for information on when the most recent updates have been made to individual state summaries.