State Data Breach Laws

Size: px
Start display at page:

Download "State Data Breach Laws"

Transcription

1 State Data Breach Laws 1

2 Alaska Personal information means a combination of (A) an individual s name;... and (B) one or more of the following information elements: (i) the individual s social security number; (ii) the individual s driver s license number or state identification card number; (iii) except as provided in (iv) of this subparagraph, the individual s account number, credit card number, or debit card number; (iv) if an account can only be accessed with a personal code, the number in (iii) of this subparagraph and the personal code; in this sub-subparagraph, personal code means a security code, an access code, a personal identification number, or a password; (v) passwords, personal identification numbers, or other access codes for financial accounts. No, if notice provided to Attorney General that there is not a reasonable likelihood that harm to the consumers will result from breach. ALASKA STAT Yes. Disclosure is not required if, after an appropriate investigation and after written notification to the attorney general of this state, the covered person determines that there is not a reasonable likelihood that harm to the consumers whose personal information has been acquired has resulted or will result from the breach. The determination shall be documented in writing, and the documentation shall be maintained for five years. ALASKA STAT Most expeditious time ALASKA STAT Arizona ALASKA STAT Personal information is an individual s first name or first initial and last name in combination with any one or more of the following data elements: (i) The individual s social security number. (ii) The individual s number on a driver license. (iii) The individual s financial account number or credit or debit card number in combination with any required security code, access code or password that would permit access to the individual s financial account. ARIZ. REV. STAT Yes, but a person is not required to disclose a breach of the security of the system if the person or a law enforcement agency, after a reasonable investigation, determines that a breach of the security of the system has not occurred or is not reasonably likely to occur. ARIZ. REV. STAT Breach, breach of the security of the system, breach of the security system or security breach means an unauthorized acquisition of and access to unencrypted or unredacted computerized data that materially compromises the security or confidentiality of personal information maintained by a person as part of a database of personal information regarding multiple individuals and that causes or is reasonably likely to cause substantial economic loss to an individual. The notice shall be made in the most expedient manner unreasonable delay ARIZ. REV. STAT ARIZ. REV. STAT (emphasis added). 2

3 Arkansas Personal information means an individual s first name or first initial and his or her last name in combination with any one (1) or more of the following data elements: (A) Social security number; (B) Driver s license number or Arkansas identification card number; (C) Account number, credit card number, or debit card number in combination with any required security code, access code, or password that would permit access to an individual s financial account; and (D) Medical information. Yes, but notification... is not required if, after a reasonable investigation, the person or business determines that there is no reasonable likelihood of harm to customers. ARK. CODE The disclosure shall be made in the most expedient time and manner possible and without unreasonable delay ARK. CODE California ARK. CODE Personal information means either of the following: (1) An individual s first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted: (A) Social security number. (B) Driver s license number or California identification card number. (C) Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. (D) Medical information. (E) Health insurance information. (F) Information or data collected through the use or operation of an automated license plate recognition system, as defined in Section (2) A user name or address, in combination with a password or security question and answer that would permit access to an online account. Yes. Yes, if more than 500 California residents are notified. A person or business that is required to issue a security breach notification pursuant to this section to more than 500 California residents as a result of a single breach of the security system shall electronically submit a single sample copy of that security breach notification, excluding any personally identifiable information, to the Attorney General. CAL. CIV. CODE (g). The disclosure shall be made in the most expedient time unreasonable delay, CAL. CIV. CODE Cal. Civ. Code (h). 3

4 Colorado Personal information means a Colorado resident s first name or first initial and last name in combination with any one or more of the following data elements that relate to the resident, when the data elements are not encrypted, redacted, or secured by any other method rendering the name or the element unreadable or unusable: (A) Social security number; (B) Driver s license number or identification card number; (C) Account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to a resident s financial account. Yes, unless the investigation determines that the misuse of information about a Colorado resident has not occurred and is not reasonably likely to occur. COLO. REV. STAT Notice shall be made in the most expedient time possible and without unreasonable delay, COLO. REV. STAT Connecticut COLO. REV. STAT (d). Personal information means an individual s first name or first initial and last name in combination with any one, or more, of the following data: (A) Social Security number; (B) driver s license number or state identification card number; or (C) account number, credit or debit card number, in combination with any required security code, access code or password that would permit access to an individual s financial account. CONN. GEN. STAT. 36a-701b. Yes, but notification shall not be required if, after an appropriate investigation and consultation with relevant federal, state and local agencies responsible for law enforcement, the person reasonably determines that the breach will not likely result in harm to the individuals whose personal information has been acquired and accessed. Person must provide simultaneous notice to Attorney General and residents. CONN. GEN. STAT. 36a-701b. Such notice shall be made without unreasonable delay but not later than ninety days after the discovery of such breach, unless a shorter time is required under federal law. CONN. GEN. STAT. 36a-701b. Delaware Personal information means a Delaware resident s first name or first initial and last name in combination with any 1 or more of the following data elements that relate to the resident, when either the name or the data elements are not encrypted: a. Social Security number; b. Driver s license number or Delaware Identification Card number; or c. Account number, or credit or debit card number, in combination with any required security code, access code, or password that would permit access to a resident s financial account. CONN. GEN. STAT. 36a-701b. Yes, but only if an investigation determines that the misuse of information about a Delaware resident has occurred or is reasonably likely to occur. DEL. CODE TIT. 6, 12B-102. Notice must be made in the most expedient time possible and without unreasonable delay. DEL. CODE TIT. 6, 12B-102. DEL. CODE TIT. 6, 12B

5 Florida Georgia Personal information means either of the following: a. An individual s first name or first initial and last name in combination with any one or more of the following data elements for that individual: (I) A social security number; (II) A driver license or identification card number, passport number, military identification number, or other similar number issued on a government document used to verify identity; (III) A financial account number or credit or debit card number, in combination with any required security code, access code, or password that is necessary to permit access to an individual s financial account; (IV) Any information regarding an individual s medical history, mental or physical condition, or medical treatment or diagnosis by a health care professional; or (V) An individual s health insurance policy number or subscriber identification number and any unique identifier used by a health insurer to identify the individual. FLA. STAT Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted or redacted: (A) Social security number; (B) Driver s license number or state identification card number; (C) Account number, credit card number, or debit card number, if circumstances exist wherein such a number could be used without additional identifying information, access codes, or passwords; (D) Account passwords or personal identification numbers or other access codes; or (E) Any of the items contained in subparagraphs (A) through (D) of this paragraph when not in connection with the individual s first name or first initial and last name, if the information compromised would be sufficient to perform or attempt to perform identity theft against the person whose information was compromised. GA. CODE Yes, but notice to the affected individuals is not required if, after an appropriate investigation and consultation with relevant federal, state, or local law enforcement agencies, the covered entity reasonably determines that the breach has not and will not likely result in identity theft or any other financial harm to the individuals whose personal information has been accessed. Such a determination must be documented in writing and maintained for at least 5 years. The covered entity shall provide the written determination to the department within 30 days after the determination. FLA. STAT Yes, if the disclosure affects more than 500 residents. FLA. STAT Notice must be provided to residents and government as expeditiously as practicable and without unreasonable delay, but no later than 30 days after breach. FLA. STAT Yes. The notice shall be made in the most expedient time GA. CODE

6 Hawaii Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted: (1) Social security number; (2) Driver s license number or Hawaii identification card number; or (3) Account number, credit or debit card number, access code, or password that would permit access to an individual s financial account. HAW. REV. STAT. 487N-1. Yes, but only where harm is likely to occur. Security breach means an incident of unauthorized access to and acquisition of unencrypted or unredacted records or data containing personal information where illegal use of the personal information has occurred, or is reasonably likely to occur and that creates a risk of harm to a person. HAW. REV. STAT. 487N-1. Yes, if more than 1,000 persons notified pursuant to Hawaii law. In the event a business provides notice to more than one thousand persons at one time pursuant to this section, the business shall notify in writing, without unreasonable delay, the State of Hawaii s office of consumer protection and all consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, as defined in 15 U.S.C. section 1681a(p), of the timing, distribution, and content of the notice. The disclosure notification shall be made without HAW. REV. STAT. 487N-2. Idaho Personal information means an Idaho resident s first name or first initial and last name in combination with any one (1) or more of the following data elements that relate to the resident, when either the name or the data elements are not encrypted: (a) Social security number; (b) Driver s license number or Idaho identification card number; or (c) Account number, or credit or debit card number, in combination with any required security code, access code, or password that would permit access to a resident s financial account. Yes, but only if the investigation determines that the misuse of information about an Idaho resident has occurred or is reasonably likely to occur, the agency, individual or the commercial entity shall give notice as soon as possible to the affected Idaho resident. IDAHO CODE HAW. REV. STAT. 487N-2. Yes, if the breach occurs on the network of a government agency. IDAHO CODE Notice must be made in the most expedient time possible and without unreasonable delay. IDAHO CODE IDAHO CODE

7 Illinois Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted or redacted: (1) Social Security number. (2) Driver s license number or State identification card number. (3) Account number or credit or debit card number, or an account number or credit card number in combination with any required security code, access code, or password that would permit access to an individual s financial account. 815 ILL. COMP. STAT. 530/5. Yes. An amendment effective January 1, 2017 requires that all entities, including state agencies, with a data breach affecting over 250 Illinois residents has to notify the Illinois AG, generally within 45 days of the breach, regarding the following: 1) the kind of personal information compromised; 2) the number of Illinois residents affected by the breach; 3) what the entity will do to inform people about the breach; and 4) information about the breach Beginning on January 1, 2017, yes. IL. H.B (2016) Notification shall be made in the most expedient time 815 ILL. COMP. STAT. 530/10. Indiana Personal information means: (1) a Social Security number that is not encrypted or redacted; or (2) an individual s first and last names, or first initial and last name, and one (1) or more of the following data elements that are not encrypted or redacted: (A) A driver s license number. (B) A state identification card number. (C) A credit card number. (D) A financial account number or debit card number in combination with a security code, password, or access code that would permit access to the person s account. Yes, but only if the data base owner knows, should know, or should have known that the unauthorized acquisition constituting the breach has resulted in or could result in identity deception, identity theft, or fraud affecting the Indiana resident. IND. CODE Yes, if database owner must notify residents, it must also notify Attorney General. IND. CODE The disclosure or notification must be sent without unreasonable delay. IND. CODE IND. CODE

8 Iowa Kansas Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements that relate to the individual if any of the data elements are not encrypted, redacted, or otherwise altered by any method or technology in such a manner that the name or data elements are unreadable or are encrypted, redacted, or otherwise altered by any method or technology but the keys to unencrypt, unredact, or otherwise read the data elements have been obtained through the breach of security: (1) Social security number. (2) Driver s license number or other unique identification number created or collected by a government body. (3) Financial account number, credit card number, or debit card number in combination with any required expiration date, security code, access code, or password that would permit access to an individual s financial account. (4) Unique electronic identifier or routing code, in combination with any required security code, access code, or password that would permit access to an individual s financial account. (5) Unique biometric data, such as a fingerprint, retina or iris image, or other unique physical representation or digital representation of biometric data. IOWA CODE 715C.1. Personal information means a consumer s first name or first initial and last name linked to any one or more of the following data elements that relate to the consumer, when the data elements are neither encrypted nor redacted: (1) Social security number; (2) driver s license number or state identification card number; or (3) financial account number, or credit or debit card number, alone or in combination with any required security code, access code or password that would permit access to a consumer s financial account. KAN. STAT. 50-7a01. Yes, but notification is not required if, after an appropriate investigation or after consultation with the relevant federal, state, or local agencies responsible for law enforcement, the person determined that no reasonable likelihood of financial harm to the consumers whose personal information has been acquired has resulted or will result from the breach. Such a determination must be documented in writing and the documentation must be maintained for five years. IOWA CODE 715C.2. Notice required only if, after investigation, misuse of information has occurred or is likely to occur. KAN. STAT. 50-7a02. Yes, if notice is provided to 500 or more Iowa residents. Any person who owns or licenses computerized data that includes a consumer s personal information that is used in the course of the person s business, vocation, occupation, or volunteer activities and that was subject to a breach of security requiring notification to more than five hundred residents of this state pursuant to this section shall give written notice of the breach of security following discovery of such breach of security, or receipt of notification under subsection 2, to the director of the consumer protection division of the office of the attorney general within five business days after giving notice of the breach of security to any consumer pursuant to this section. IOWA CODE 715C.2. The consumer notification shall be made in the most expeditious manner IOWA CODE 715C.2. Notice must be made in the most expedient time unreasonable delay KAN. STAT. 50-7a02. 8

9 Kentucky Personally identifiable information means an individual s first name or first initial and last name in combination with any one (1) or more of the following data elements, when the name or data element is not redacted: 1. Social Security number; 2. Driver s license number; or 3. Account number or credit or debit card number, in combination with any required security code, access code, or password to permit access to an individual s financial account. KY. REV. STAT (West) Disclosure required only if breach actually causes, or leads the information holder to reasonably believe has caused or will cause, identity theft or fraud against any resident of the Commonwealth of Kentucky. KY. REV. STAT The disclosure shall be made in the most expedient time possible and without unreasonable delay. KY. REV. STAT Louisiana Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when the name or the data element is not encrypted or redacted: (i) Social security number. (ii) Driver s license number. (iii) Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. Notification to residents is not required if after a reasonable investigation the person or business determines that there is no reasonable likelihood of harm to customers. LA. STAT. 51:3074. Where notice is required to be provided to citizens, notice is also required to be provided to Attorney General. LA. ADMIN. CODE TIT. 16, pt. III, 701. Notice shall be made in the most expedient time LA. STAT. 51:3074. LA. STAT. 51:3073. Maine Personal information means an individual s first name, or first initial, and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted or redacted: A. Social security number; B. Driver s license number or state identification card number; C. Account number, credit card number or debit card number, if circumstances exist wherein such a number could be used without additional identifying information, access codes or passwords; D. Account passwords or personal identification numbers or other access codes; or E. Any of the data elements contained in paragraphs A to D when not in connection with the individual s first name, or first initial, and last name, if the information if compromised would be sufficient to permit a person to fraudulently assume or attempt to assume the identity of the person whose information was compromised. ME. REV. STAT. TIT. 10, Notice required only if misuse of the personal information has occurred or if it is reasonably possible that misuse will occur. ME. REV. STAT. TIT. 10, If notice to residents is required, notice to appropriate governmental authority is also required: When notice of a breach of the security of the system is required under subsection 1, the person shall notify the appropriate state regulators within the Department of Professional and Financial Regulation, or if the person is not regulated by the department, the Attorney General. ME. REV. STAT. TIT. 10, Notice must be made expediently as possible and without unreasonable delay. ME. REV. STAT. TIT. 10,

10 Maryland Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when the name or the data elements are not encrypted, redacted, or otherwise protected by another method that renders the information unreadable or unusable: (i) A Social Security number; (ii) A driver s license number; (iii) A financial account number, including a credit card number or debit card number, that in combination with any required security code, access code, or password, would permit access to an individual s financial account; or (iv) An Individual Taxpayer Identification Number. MD. CODE, COM. LAW Disclosure is required only where the business determines that misuse of the individual s personal information has occurred or is reasonably likely to occur as a result of a breach of the security of a system. MD. CODE, COM. LAW Attorney General must be notified prior to any notices to residents. Prior to giving the notification required under subsection (b) of this section and subject to subsection (d) of this section, a business shall provide notice of a breach of the security of a system to the Office of the Attorney General. MD. CODE, COM. LAW As soon as reasonably practicable. MD. CODE, COM. LAW Massachusetts Personal information a resident s first name and last name or first initial and last name in combination with any 1 or more of the following data elements that relate to such resident: (a) Social Security number; (b) driver s license number or stateissued identification card number; or (c) financial account number, or credit or debit card number, with or without any required security code, access code, personal identification number or password, that would permit access to a resident s financial account; provided, however, that Personal information shall not include information that is lawfully obtained from publicly available information, or from federal, state or local government records lawfully made available to the general public. Notice required only if the breach creates a substantial risk of identity theft or fraud against a resident of the commonwealth. MASS. GEN. LAWS ch. 93H, 1. Must notify governmental agencies, including Attorney General and the director of consumer affairs and business regulation. MASS. GEN. LAWS ch. 93H, 3. Notice must be provided as soon as practicable and without unreasonable delay. MASS. GEN. LAWS ch. 93H, 3. MASS. GEN. LAWS ch. 93H, 1. 10

11 Michigan Personal identifying information means a name, number, or other information that is used for the purpose of identifying a specific person or providing access to a person s financial accounts, including, but not limited to, a person s name, address, telephone number, driver license or state personal identification card number, social security number, place of employment, employee identification number, employer or taxpayer identification number, government passport number, health insurance identification number, mother s maiden name, demand deposit account number, savings account number, financial transaction device account number or the person s account password, any other account password in combination with sufficient information to identify and access the account, automated or electronic signature, biometrics, stock or other security certificate or account number, credit card number, vital record, or medical records or information. Notice to residents required unless the person or agency determines that the security breach has not or is not likely to cause substantial loss or injury to, or result in identity theft with respect to, 1 or more residents of this state. MICH. COMP. LAWS Without unreasonable delay. MICH. COMP. LAWS Minnesota MICH. COMP. LAWS Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when the data element is not secured by encryption or another method of technology that makes electronic data unreadable or unusable, or was secured and the encryption key, password, or other means necessary for reading or using the data was also acquired: (1) Social Security number; (2) driver s license number or Minnesota identification card number; or (3) account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. Yes. The disclosure must be made in the most expedient time possible and without unreasonable delay. MINN. STAT. 325E.61. Mississippi MINN. STAT. 325E.61. Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements: (i) Social security number; (ii) Driver s license number or state identification card number; or (iii) An account number or credit or debit card number in combination with any required security code, access code or password that would permit access to an individual s financial account; personal information does not include publicly available information that is lawfully made available to the general public from federal, state or local government records or widely distributed media. MISS. CODE Yes, but notification shall not be required if, after an appropriate investigation, the person reasonably determines that the breach will not likely result in harm to the affected individuals. MISS. CODE Without unreasonable delay. MISS. CODE

12 Missouri Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements that relate to the individual if any of the data elements are not encrypted, redacted, or otherwise altered by any method or technology in such a manner that the name or data elements are unreadable or unusable: (a) Social Security number; (b) Driver s license number or other unique identification number created or collected by a government body; (c) Financial account number, credit card number, or debit card number in combination with any required security code, access code, or password that would permit access to an individual s financial account; (d) Unique electronic identifier or routing code, in combination with any required security code, access code, or password that would permit access to an individual s financial account; (e) Medical information; or (f) Health insurance information. MO. STAT Yes, but notification is not required if, after an appropriate investigation by the person or after consultation with the relevant federal, state, or local agencies responsible for law enforcement, the person determines that a risk of identity theft or other fraud to any consumer is not reasonably likely to occur as a result of the breach. Such a determination shall be documented in writing and the documentation shall be maintained for five years. Yes, if more than 1,000 persons affected. In the event a person provides notice to more than one thousand consumers at one time pursuant to this section, the person shall notify, without unreasonable delay, the attorney general s office and all consumer reporting agencies. MO. STAT Without unreasonable delay. MO. STAT Montana Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted: (A) social security number; (B) driver s license number, state identification card number, or tribal identification card number; (C) account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account; (D) medical record information as defined in ; (E) a taxpayer identification number; or (F) an identity protection personal identification number issued by the United States internal revenue service. MONT. CODE MO. STAT Yes, but notification required only where there is a breach of the security of the data system, which means unauthorized acquisition of computerized data that materially compromises the security, confidentiality, or integrity of personal information maintained by the person or business and causes or is reasonably believed to cause loss or injury to a Montana resident. Yes, if required to notify residents. Any person or business that is required to issue a notification pursuant to this section shall simultaneously submit an electronic copy of the notification and a statement providing the date and method of distribution of the notification to the attorney general s consumer protection office. MONT. CODE The disclosure must be made without MONT. CODE MONT. CODE

13 Nebraska Personal information means a Nebraska resident s first name or first initial and last name in combination with any one or more of the following data elements that relate to the resident if either the name or the data elements are not encrypted, redacted, or otherwise altered by any method or technology in such a manner that the name or data elements are unreadable: (a) Social security number; (b) Motor vehicle operator s license number or state identification card number; (c) Account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to a resident s financial account; (d) Unique electronic identification number or routing code, in combination with any required security code, access code, or password; or (e) Unique biometric data, such as a fingerprint, voice print, or retina or iris image, or other unique physical representation. NEB. REV. STAT Yes, after breach, business must conduct in good faith a reasonable and prompt investigation to determine the likelihood that personal information has been or will be used for an unauthorized purpose and if the investigation determines that the use of information about a Nebraska resident for an unauthorized purpose has occurred or is reasonably likely to occur, the individual or commercial entity shall give notice to the affected Nebraska resident. NEB. REV. STAT No, but amendments take effect on July 20, 2016 that do require notice to Attorney General: If notice of a breach of security of the system is required by subsection (1) of this section, the individual or commercial entity shall also, not later than the time when notice is provided to the Nebraska resident, provide notice of the breach of security of the system to the Attorney General. NE LEGIS 835 (2016). As soon as possible and without unreasonable delay NEB. REV. STAT Nevada Personal information means a natural person s first name or first initial and last name in combination with any one or more of the following data elements, when the name and data elements are not encrypted: (a) Social security number. (b) Driver s license number, driver authorization card number or identification card number. (c) Account number, credit card number or debit card number, in combination with any required security code, access code or password that would permit access to the person s financial account. (d) A medical identification number or a health insurance identification number. (e) A user name, unique identifier or electronic mail address in combination with a password, access code or security question and answer that would permit access to an online account. Yes, but only where there is a breach of the security of the system data, defined as the unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information maintained by the data collector. NEV. REV. STAT. 603A.020. The disclosure must be made in the most expedient time possible and without unreasonable delay. NEV. REV. STAT. 603A.220. New Hampshire NEV. REV. STAT. 603A.040. Personal information means an individual s first name or initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted: (1) Social security number. (2) Driver s license number or other government identification number. (3) Account number, credit card number, or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. Yes, if after determining that misuse of the information has occurred or is reasonably likely to occur, or if a determination cannot be made, the person shall notify the affected individuals as soon as possible as required under this subdivision. Yes, notice to applicable regulator and Attorney General. N.H. REV. STAT. 359-C:20. As soon as possible. N.H. REV. STAT. 359-C:20. N.H. REV. STAT. 359-C:19. N.H. REV. STAT. 359-C:20. 13

14 New Jersey Personal information means an individual s first name or first initial and last name linked with any one or more of the following data elements: (1) Social Security number; (2) driver s license number or State identification card number; or (3) account number or credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. Dissociated data that, if linked, would constitute personal information is personal information if the means to link the dissociated data were accessed in connection with access to the dissociated data. N.J. STAT. 56: Yes, but disclosure of a breach of security to a customer shall not be required under this section if the business or public entity establishes that misuse of the information is not reasonably possible. Any determination shall be documented in writing and retained for five years. N.J. STAT. 56: Yes, prior to any notice to residents: Any business or public entity required under this section to disclose a breach of security of a customer s personal information shall, in advance of the disclosure to the customer, report the breach of security and any information pertaining to the breach to the Division of State Police in the Department of Law and Public Safety for investigation or handling, which may include dissemination or referral to other appropriate law enforcement entities. N.J. STAT. 56: The disclosure to a customer shall be made in the most expedient time N.J. STAT. 56: New York Personal information shall mean any information concerning a natural person which, because of name, number, personal mark, or other identifier, can be used to identify such natural person; (b) Private information shall mean personal information consisting of any information in combination with any one or more of the following data elements, when either the personal information or the data element is not encrypted, or encrypted with an encryption key that has also been acquired: (1) social security number; (2) driver s license number or non-driver identification card number; or (3) account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. Yes. Yes, if residents are notified. In the event that any New York residents are to be notified, the person or business shall notify the state attorney general, the department of state and the division of state police as to the timing, content and distribution of the notices and approximate number of affected persons. Such notice shall be made without delaying notice to affected New York residents. N.Y. GEN. BUS. LAW 899-aa. The disclosure shall be made in the most expedient time possible and without unreasonable delay. N.Y. GEN. BUS. LAW 899- aa. N.Y. GEN. BUS. LAW 899-aa. 14

15 North Carolina A person s first name or first initial and last name in combination with identifying information, which includes (1) Social security or employer taxpayer identification numbers. (2) Drivers license, State identification card, or passport numbers. (3) Checking account numbers. (4) Savings account numbers. (5) Credit card numbers. (6) Debit card numbers. (7) Personal Identification (PIN) Code as defined in G.S (6). (8) Electronic identification numbers, electronic mail names or addresses, Internet account numbers, or Internet identification names. (9) Digital signatures. (10) Any other numbers or information that can be used to access a person s financial resources. (11) Biometric data. (12) Fingerprints. (13) Passwords. (14) Parent s legal surname prior to marriage. N.C. GEN. STAT Yes, but only where there is a security breach, defined to limit notification to those instances where illegal use of the personal information has occurred or is reasonably likely to occur or that creates a material risk of harm to a consumer. N.C. GEN. STAT Yes, if notice to residents is required. In the event a business provides notice to an affected person pursuant to this section, the business shall notify without unreasonable delay the Consumer Protection Division of the Attorney General s Office of the nature of the breach, the number of consumers affected by the breach, steps taken to investigate the breach, steps taken to prevent a similar breach in the future, and information regarding the timing, distribution, and content of the notice. The disclosure notification shall be made without N.C. GEN. STAT North Dakota Personal information means an individual s first name or first initial and last name in combination with any of the following data elements, when the name and the data elements are not encrypted: (1) The individual s social security number; (2) The operator s license number assigned to an individual by the department of transportation under section ; (3) A nondriver color photo identification card number assigned to the individual by the department of transportation under section ; (4) The individual s financial institution account number, credit card number, or debit card number in combination with any required security code, access code, or password that would permit access to an individual s financial accounts; (5) The individual s date of birth; (6) The maiden name of the individual s mother; (7) Medical information; (8) Health insurance information; (9) An identification number assigned to the individual by the individual s employer in combination with any required security code, access code, or password; or (10) The individual s digitized or other electronic signature. N.C. GEN. STAT Yes. Yes, where breach affects more than 250 individuals. In addition, any person that experiences a breach of the security system as provided in this section shall disclose to the attorney general by mail or any breach of the security system which exceeds two hundred fifty individuals. N.D. CENT. CODE The disclosure must be made in the most expedient time possible. N.D. CENT. CODE N.D. CENT. CODE

16 Ohio (exempts credit unions regulated under federal law, OHIO REV. CODE ) Personal information means an individual s name, consisting of the individual s first name or first initial and last name, in combination with and linked to any one or more of the following data elements, when the data elements are not encrypted, redacted, or altered by any method or technology in such a manner that the data elements are unreadable: (i) Social security number; (ii) Driver s license number or state identification card number; (iii) Account number or credit or debit card number, in combination with and linked to any required security code, access code, or password that would permit access to an individual s financial account. OHIO REV. CODE Yes, but notice is required only for a breach of the security of the system, which is limited to unauthorized access to and acquisition of computerized data that compromises the security or confidentiality of personal information owned or licensed by a person and that causes, reasonably is believed to have caused, or reasonably is believed will cause a material risk of identity theft or other fraud to the person or property of a resident of this state. OHIO REV. CODE Any person that owns or licenses computerized data that includes personal information shall disclose any breach of the security of the system, following its discovery or notification of the breach of the security of the system, to any resident of this state whose personal information was, or reasonably is believed to have been, accessed and acquired by an unauthorized person if the access and acquisition by the unauthorized person causes or reasonably is believed will cause a material risk of identity theft or other fraud to the resident. Yes, if the data breach occurs on the system of a state agency or political subdivision, and that agency or subdivision is the custodian of, or stores, the breached data on behalf of another state agency or subdivision. OHIO REV. CODE Most expedient time possible, but no later than 45 days after discovery or notification of breach. OHIO REV. CODE Oklahoma (safe harbor with Gramm- Leach-Bliley Act, OKLA. STAT. TIT. 24, 164). Personal information means the first name or first initial and last name in combination with and linked to any one or more of the following data elements that relate to a resident of this state, when the data elements are neither encrypted nor redacted: a. social security number, b. driver license number or state identification card number issued in lieu of a driver license, or c. financial account number, or credit card or debit card number, in combination with any required security code, access code, or password that would permit access to the financial accounts of a resident. OKLA. STAT. TIT. 24, 162. OHIO REV. CODE Yes, but only if there is a reasonable belief of identity theft or fraud: An individual or entity that owns or licenses computerized data that includes personal information shall disclose any breach of the security of the system following discovery or notification of the breach of the security of the system to any resident of this state whose unencrypted and unredacted personal information was or is reasonably believed to have been accessed and acquired by an unauthorized person and that causes, or the individual or entity reasonably believes has caused or will cause, identity theft or other fraud to any resident of this state. OKLA. STAT. TIT. 24, 163. The disclosure shall be made without OKLA. STAT. TIT. 24,

17 Oregon Personal information means: (a) A consumer s first name or first initial and last name in combination with any one or more of the following data elements, if encryption, redaction or other methods have not rendered the data elements unusable or if the data elements are encrypted and the encryption key has been acquired: (A) A consumer s Social Security number; (B) A consumer s driver license number or state identification card number issued by the Department of Transportation; (C) A consumer s passport number or other identification number issued by the United States; (D) A consumer s financial account number, credit card number or debit card number, in combination with any required security code, access code or password that would permit access to a consumer s financial account; (E) Data from automatic measurements of a consumer s physical characteristics, such as an image of a fingerprint, retina or iris, that are used to authenticate the consumer s identity in the course of a financial transaction or other transaction; (F) A consumer s health insurance policy number or health insurance subscriber identification number in combination with any other unique identifier that a health insurer uses to identify the consumer; or (G) Any information about a consumer s medical history or mental or physical condition or about a health care professional s medical diagnosis or treatment of the consumer. OR. REV. STAT. 646A.602. Yes, but notice is required only where there is a breach of security, which does not include an inadvertent acquisition of personal information by a person or the person s employee or agent if the personal information is not used in violation of applicable law or in a manner that harms or poses an actual threat to the security, confidentiality or integrity of the personal information. OR. REV. STAT. 646A.602. Moreover, a person does not need to notify consumers of a breach of security if, after an appropriate investigation or after consultation with relevant federal, state or local law enforcement agencies, the person reasonably determines that the consumers whose personal information was subject to the breach of security are unlikely to suffer harm. The person must document the determination in writing and maintain the documentation for at least five years. OR. REV. STAT. 646A.604. Yes, notice must be provided to Attorney General if provided to individuals exceeds 250. OR. REV. STAT. 646A.604. The person shall notify the consumer in the most expeditious manner possible, without OR. REV. STAT. 646A.604. Pennsylvania Personal information means an individual s first name or first initial and last name in combination with and linked to any one or more of the following data elements when the data elements are not encrypted or redacted: (i) Social Security number. (ii) Driver s license number or a State identification card number issued in lieu of a driver s license. (iii) Financial account number, credit or debit card number, in combination with any required security code, access code or password that would permit access to an individual s financial account. 73 PA. STAT Yes, notice required for breach of the security system, which means the unauthorized access and acquisition of computerized data that materially compromises the security or confidentiality of personal information maintained by the entity as part of a database of personal information regarding multiple individuals and that causes or the entity reasonably believes has caused or will cause loss or injury to any resident of this Commonwealth. 73 PA. STAT The notice shall be made without unreasonable delay. 73 PA. STAT

18 Rhode Island South Carolina (Gramm- Leach-Bliley Act safe harbor, S.C. CODE (I)). Personal information means an individual s first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted: (1) Social security number; (2) Driver s license number or Rhode Island Identification Card number; (3) Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. 11 R.I. GEN. LAWS **Note: A broader definition was adopted in new law effective summer of Personal identifying information means the first name or first initial and last name in combination with and linked to any one or more of the following data elements that relate to a resident of this State, when the data elements are neither encrypted nor redacted: (a) social security number; (b) driver s license number or state identification card number issued instead of a driver s license; (c) financial account number, or credit card or debit card number in combination with any required security code, access code, or password that would permit access to a resident s financial account; or (d) other numbers or information which may be used to access a person s financial accounts or numbers or information issued by a governmental or regulatory entity that uniquely will identify an individual. Yes, but notification of a breach is not required if, after an appropriate investigation or after consultation with relevant federal, state, or local law enforcement agencies, a determination is made that the breach has not and will not likely result in a significant risk of identity theft to the individuals whose personal information has been acquired. 11 R.I. GEN. LAWS Yes, but notice is required only when the illegal use of the information has occurred or is reasonably likely to occur or use of the information creates a material risk of harm to the resident. S.C. CODE No, but new requirement effective July 2, 2016, requiring notice to Attorney General if more than 500 residents are affected. In the event that more than five hundred (500) Rhode Island residents are to be notified, the municipal agency, state agency, or person shall notify the attorney general. 11 R.I. GEN. LAWS Yes, but only if there are 1,000 or more persons notified: If a business provides notice to more than one thousand persons at one time pursuant to this section, the business shall notify, without unreasonable delay, the Consumer Protection Division of the Department of Consumer Affairs. S.C. CODE The disclosure shall be made in the most expedient time 11 R.I. GEN. LAWS **45-day deadline effective July 2, R.I. GEN. LAWS The disclosure must be made in the most expedient time S.C. CODE Tennessee S.C. CODE Personal information means an individual s first name or first initial and last name, in combination with any one (1) or more of the following data elements, when either the name or the data elements are not encrypted: (i) Social security number; (ii) Driver license number; or (iii) Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual s financial account. Yes. The disclosure shall be made in the most expedient time TENN. CODE **Effective July 1, 2016, there is a 45-day deadline for notice. TENN. CODE Tennessee Laws Pub. Ch. 692 (S.B. 2005). 18

State Data Breach Notification Laws

State Data Breach Notification Laws State Data Breach Notification Laws Please note that state data breach notification laws change frequently. The recommended actions an entity should take if it experiences a security event, incident or

More information

Security Breach Notification Chart

Security Breach Notification Chart Security Breach Notification Chart Perkins Coie's Privacy & Security practice maintains this comprehensive chart of state laws regarding security breach notification. The chart is for informational purposes

More information

Data Breach Charts. November 2017

Data Breach Charts. November 2017 Data Breach Charts November 2017 DATA BREACH CHARTS The following standard definitions of Personal Information and Breach of Security (based on the definition commonly used by most states) are used for

More information

Security Breach Notification Chart

Security Breach Notification Chart Security Breach Notification Chart Perkins Coie's Privacy & Security practice maintains this comprehensive chart of state laws regarding security breach notification. The chart is for informational purposes

More information

SCHWARTZ & BALLEN LLP 1990 M STREET, N.W. SUITE 500 WASHINGTON, DC

SCHWARTZ & BALLEN LLP 1990 M STREET, N.W. SUITE 500 WASHINGTON, DC 1990 M STREET, N.W. SUITE 500 WASHINGTON, DC 20036-3465 WWW.SCHWARTZANDBALLEN.COM TELEPHONE FACSIMILE (202) 776-0700 (202) 776-0720 To Our Clients and Friends Re: State Security Breach Laws M E M O R A

More information

Security Breach Notification Chart

Security Breach Notification Chart Security Breach Notification Chart Perkins Coie's Privacy & Security practice maintains this comprehensive chart of state laws regarding security breach notification. The chart is for informational purposes

More information

Security Breach Notification Chart

Security Breach Notification Chart Security Breach Notification Chart Perkins Coie's Privacy & Security practice maintains this comprehensive chart of state laws regarding security breach notification. The chart is for informational purposes

More information

State Data Breach Notification Laws

State Data Breach Notification Laws State Data Breach Notification Laws This chart should be used for informational purposes only because the recommended actions an entity should take if it experiences a security event, incident, or breach

More information

Laws Governing Data Security and Privacy U.S. Jurisdictions at a Glance UPDATED MARCH 30, 2015

Laws Governing Data Security and Privacy U.S. Jurisdictions at a Glance UPDATED MARCH 30, 2015 Laws Governing Data Security and Privacy U.S. Jurisdictions at a Glance UPDATED MARCH 30, 2015 State Statute Year Statute Alabama* Ala. Information Technology Policy 685-00 (Applicable to certain Executive

More information

Security Breach Notification Chart

Security Breach Notification Chart Security Breach Notification Chart Perkins Coie's Privacy & Security practice maintains this comprehensive chart of state laws regarding security breach notification. The chart is for informational purposes

More information

Laws Governing Data Security and Privacy U.S. Jurisdictions at a Glance

Laws Governing Data Security and Privacy U.S. Jurisdictions at a Glance Laws Governing Security and Privacy U.S. Jurisdictions at a Glance State Statute Year Statute Adopted or Significantly Revised Alabama* ALA. INFORMATION TECHNOLOGY POLICY 685-00 (applicable to certain

More information

State Data Breach Notification Laws

State Data Breach Notification Laws State Data Breach Notification Laws This chart should be used for informational purposes only because the recommended actions an entity should take if it experiences a security event, incident, or breach

More information

Elder Financial Abuse and State Mandatory Reporting Laws for Financial Institutions Prepared by CUNA s State Government Affairs

Elder Financial Abuse and State Mandatory Reporting Laws for Financial Institutions Prepared by CUNA s State Government Affairs Elder Financial Abuse and State Mandatory Reporting Laws for Financial Institutions Prepared by CUNA s State Government Affairs Overview Financial crimes and exploitation can involve the illegal or improper

More information

State Data Breach Law Summary. November 2017

State Data Breach Law Summary. November 2017 November 2017 STATE DATA BREACH LAW SUMMARY To view the requirements for a specific state 1, click on the state name below. Alaska Idaho Minnesota Ohio Washington Arizona Illinois Mississippi Oklahoma

More information

STATE DATA SECURITY BREACH LEGISLATION SURVEY

STATE DATA SECURITY BREACH LEGISLATION SURVEY STATE DATA SECURITY BREACH LEGISLATION SURVEY State and Timing/ Alaska H.B. 65 Signed into law June 13, 2008. Alaska Stat. Tit. 45, Ch. 48, 10 to 90 Alaska residents. Any person doing business, any person

More information

STATE DATA SECURITY BREACH NOTIFICATION LAWS

STATE DATA SECURITY BREACH NOTIFICATION LAWS STATE DATA SECURITY BREACH NOTIFICATION LAWS Please note: This chart is for informational purposes only and does not constitute legal advice or opinions regarding any specific facts relating to specific

More information

STATE DATA SECURITY BREACH NOTIFICATION LAWS

STATE DATA SECURITY BREACH NOTIFICATION LAWS STATE DATA SECURITY BREACH NOTIFICATION LAWS Please note: This chart is for informational purposes only and does not constitute legal advice or opinions regarding any specific facts relating to specific

More information

Statutes of Limitations for the 50 States (and the District of Columbia)

Statutes of Limitations for the 50 States (and the District of Columbia) s of Limitations in All 50 s Nolo.com Page 6 of 14 Updated September 18, 2015 The chart below contains common statutes of limitations for all 50 states, expressed in years. We provide this chart as a rough

More information

STATE DATA SECURITY BREACH NOTIFICATION LAWS

STATE DATA SECURITY BREACH NOTIFICATION LAWS STATE DATA SECURITY BREACH NOTIFICATION LAWS Please note: This chart is for informational purposes only and does not constitute legal advice or opinions regarding any specific facts relating to specific

More information

Survey of State Laws on Credit Unions Incidental Powers

Survey of State Laws on Credit Unions Incidental Powers Survey of State Laws on Credit Unions Incidental Powers Alabama Ala. Code 5-17-4(10) To exercise incidental powers as necessary to enable it to carry on effectively the purposes for which it is incorporated

More information

States Adopt Emancipation Day Deadline for Individual Returns; Some Opt Against Allowing Delay for Corporate Returns in 2012

States Adopt Emancipation Day Deadline for Individual Returns; Some Opt Against Allowing Delay for Corporate Returns in 2012 Source: Weekly State Tax Report: News Archive > 2012 > 03/16/2012 > Perspective > States Adopt Deadline for Individual Returns; Some Opt Against Allowing Delay for Corporate Returns in 2012 2012 TM-WSTR

More information

THE 2010 AMENDMENTS TO UCC ARTICLE 9

THE 2010 AMENDMENTS TO UCC ARTICLE 9 THE 2010 AMENDMENTS TO UCC ARTICLE 9 STATE ENACTMENT VARIATIONS INCLUDES ALL STATE ENACTMENTS Prepared by Paul Hodnefield Associate General Counsel Corporation Service Company 2015 Corporation Service

More information

State Prescription Monitoring Program Statutes and Regulations List

State Prescription Monitoring Program Statutes and Regulations List State Prescription Monitoring Program Statutes and Regulations List 1 Research Current through May 2016. This project was supported by Grant No. G1599ONDCP03A, awarded by the Office of National Drug Control

More information

State By State Survey:

State By State Survey: Connecticut California Florida State By State Survey: Cyber Risk - Security Breach tification s The Right Choice for Policyholders www.sdvlaw.com Cyber Risk 2 Cyber Risk - Security Breach tification s

More information

Page 1 of 5. Appendix A.

Page 1 of 5. Appendix A. STATE Alabama Alaska Arizona Arkansas California Colorado Connecticut District of Columbia Delaware CONSUMER PROTECTION ACTS and PERSONAL INFORMATION PROTECTION ACTS Alabama Deceptive Trade Practices Act,

More information

Arent Fox LLP Survey of Data Breach Notification Statutes

Arent Fox LLP Survey of Data Breach Notification Statutes Arent Fox LLP Survey of Data Breach Notification Statutes James Westerlind August 2016 Survey Overview This Survey focuses on the data breach notification statutes of the states and territories within

More information

DATA BREACH CLAIMS IN THE US: An Overview of First Party Breach Requirements

DATA BREACH CLAIMS IN THE US: An Overview of First Party Breach Requirements State Governing Statutes 1st Party Breach Notification Notes Alabama No Law Alaska 45-48-10 Notification must be made "in the most expeditious time possible and without unreasonable delay" unless it will

More information

Name Change Laws. Current as of February 23, 2017

Name Change Laws. Current as of February 23, 2017 Name Change Laws Current as of February 23, 2017 MAP relies on the research conducted by the National Center for Transgender Equality for this map and the statutes found below. Alabama An applicant must

More information

APPENDIX D STATE PERPETUITIES STATUTES

APPENDIX D STATE PERPETUITIES STATUTES APPENDIX D STATE PERPETUITIES STATUTES 218 STATE PERPETUITIES STATUTES State Citation PERMITS PERPETUAL TRUSTS Alaska Alaska Stat. 34.27.051, 34.27.100 Delaware 25 Del. C. 503 District of Columbia D.C.

More information

States Permitting Or Prohibiting Mutual July respondent in the same action.

States Permitting Or Prohibiting Mutual July respondent in the same action. Alabama No Code of Ala. 30-5-5 (c)(1) A court may issue mutual protection orders only if a separate petition has been filed by each party. Alaska No Alaska Stat. 18.66.130(b) A court may not grant protective

More information

Accountability-Sanctions

Accountability-Sanctions Accountability-Sanctions Education Commission of the States 700 Broadway, Suite 801 Denver, CO 80203-3460 303.299.3600 Fax: 303.296.8332 www.ecs.org Student Accountability Initiatives By Michael Colasanti

More information

APPENDIX C STATE UNIFORM TRUST CODE STATUTES

APPENDIX C STATE UNIFORM TRUST CODE STATUTES APPENDIX C STATE UNIFORM TRUST CODE STATUTES 122 STATE STATE UNIFORM TRUST CODE STATUTES CITATION Alabama Ala. Code 19-3B-101 19-3B-1305 Arkansas Ark. Code Ann. 28-73-101 28-73-1106 District of Columbia

More information

Section 4. Table of State Court Authorities Governing Judicial Adjuncts and Comparison Between State Rules and Fed. R. Civ. P. 53

Section 4. Table of State Court Authorities Governing Judicial Adjuncts and Comparison Between State Rules and Fed. R. Civ. P. 53 Section 4. Table of State Court Authorities Governing Judicial Adjuncts and Comparison Between State Rules and Fed. R. Civ. P. 53 This chart originally appeared in Lynn Jokela & David F. Herr, Special

More information

Survey of State Civil Shoplifting Statutes

Survey of State Civil Shoplifting Statutes University of Nebraska - Lincoln DigitalCommons@University of Nebraska - Lincoln College of Law, Faculty Publications Law, College of 2015 Survey of State Civil Shoplifting Statutes Ryan Sullivan University

More information

CA CALIFORNIA. Ala. Code 10-2B (2009) [Transferred, effective January 1, 2011, to 10A ] No monetary penalties listed.

CA CALIFORNIA. Ala. Code 10-2B (2009) [Transferred, effective January 1, 2011, to 10A ] No monetary penalties listed. AL ALABAMA Ala. Code 10-2B-15.02 (2009) [Transferred, effective January 1, 2011, to 10A-2-15.02.] No monetary penalties listed. May invalidate in-state contracts made by unqualified foreign corporations.

More information

WORLD TRADE ORGANIZATION

WORLD TRADE ORGANIZATION Page D-1 ANNEX D REQUEST FOR THE ESTABLISHMENT OF A PANEL BY ANTIGUA AND BARBUDA WORLD TRADE ORGANIZATION WT/DS285/2 13 June 2003 (03-3174) Original: English UNITED STATES MEASURES AFFECTING THE CROSS-BORDER

More information

STATUTES OF REPOSE. Presented by 2-10 Home Buyers Warranty on behalf of the National Association of Home Builders.

STATUTES OF REPOSE. Presented by 2-10 Home Buyers Warranty on behalf of the National Association of Home Builders. STATUTES OF Know your obligation as a builder. Educating yourself on your state s statutes of repose can help protect your business in the event of a defect. Presented by 2-10 Home Buyers Warranty on behalf

More information

Arent Fox LLP Survey of Data Breach Notification Statutes

Arent Fox LLP Survey of Data Breach Notification Statutes Arent Fox LLP Survey of Data Breach Notification Statutes James Westerlind August 2017 Survey Overview This Survey focuses on the data breach notification statutes of the states and territories within

More information

H.R and the Protection of State Conscience Rights for Pro-Life Healthcare Workers. November 4, 2009 * * * * *

H.R and the Protection of State Conscience Rights for Pro-Life Healthcare Workers. November 4, 2009 * * * * * H.R. 3962 and the Protection of State Conscience Rights for Pro-Life Healthcare Workers November 4, 2009 * * * * * Upon a careful review of H.R. 3962, there is a concern that the bill does not adequately

More information

National State Law Survey: Mistake of Age Defense 1

National State Law Survey: Mistake of Age Defense 1 1 State 1 Is there a buyerapplicable trafficking or CSEC law? 2 Does a buyerapplicable trafficking or CSEC law expressly prohibit a mistake of age defense in prosecutions for buying a commercial sex act

More information

State Statutory Provisions Addressing Mutual Protection Orders

State Statutory Provisions Addressing Mutual Protection Orders State Statutory Provisions Addressing Mutual Protection Orders Revised 2014 National Center on Protection Orders and Full Faith & Credit 1901 North Fort Myer Drive, Suite 1011 Arlington, Virginia 22209

More information

Do you consider FEIN's to be public or private information? Do you consider phone numbers to be private information?

Do you consider FEIN's to be public or private information? Do you consider phone numbers to be private information? Topic: Question by: : Private vs. Public Information Penney Barker West Virginia Date: 18 April 2011 Manitoba Corporations Canada Alabama Corporations Canada is responsible for incorporating businesses

More information

EXCEPTIONS: WHAT IS ADMISSIBLE?

EXCEPTIONS: WHAT IS ADMISSIBLE? Alabama ALA. CODE 12-21- 203 any relating to the past sexual behavior of the complaining witness CIRCUMSTANCE F when it is found that past sexual behavior directly involved the participation of the accused

More information

Authorizing Automated Vehicle Platooning

Authorizing Automated Vehicle Platooning Authorizing Automated Vehicle Platooning A Guide for State Legislators By Marc Scribner July 2016 ISSUE ANALYSIS 2016 NO. 5 Authorizing Automated Vehicle Platooning A Guide for State Legislators By Marc

More information

REPORTS AND REFERRALS TO LAW ENFORCEMENT: PROVISIONS AND CITATIONS IN ADULT PROTECTIVE SERVICES LAWS, BY STATE

REPORTS AND REFERRALS TO LAW ENFORCEMENT: PROVISIONS AND CITATIONS IN ADULT PROTECTIVE SERVICES LAWS, BY STATE REPORTS AND REFERRALS TO LAW ENFORCEMENT: PROVISIONS AND CITATIONS IN ADULT PROTECTIVE SERVICES LAWS, BY STATE (Laws current as of 12/31/06) Prepared by Lori Stiegel and Ellen Klem of the American Bar

More information

Governance State Boards/Chiefs/Agencies

Governance State Boards/Chiefs/Agencies Governance State Boards/Chiefs/Agencies Education Commission of the States 700 Broadway, Suite 1200 Denver, CO 80203-3460 303.299.3600 Fax: 303.296.8332 www.ecs.org Qualifications for Chief State School

More information

Electronic Notarization

Electronic Notarization Electronic Notarization Legal Disclaimer: Although a good faith attempt has been made to make this table as complete as possible, it is still subject to human error and constantly changing laws. It should

More information

Once More Unto the Breach: An Analysis of Legal, Technological, and Policy Issues Involving Data Breach Notification Statutes

Once More Unto the Breach: An Analysis of Legal, Technological, and Policy Issues Involving Data Breach Notification Statutes The University of Akron IdeaExchange@UAkron Akron Intellectual Property Journal Akron Law Journals March 2016 Once More Unto the Breach: An Analysis of Legal, Technological, and Policy Issues Involving

More information

Once More Unto the Breach: An Analysis of Legal, Technological and Policy Issues Involving Data Breach Notification Statutes

Once More Unto the Breach: An Analysis of Legal, Technological and Policy Issues Involving Data Breach Notification Statutes Howard University Digital Howard @ Howard University School of Law Faculty Publications School of Law Once More Unto the Breach: An Analysis of Legal, Technological and Policy Issues Involving Data Breach

More information

State-by-State Lien Matrix

State-by-State Lien Matrix Alabama Yes Upon notification by the court of the security transfer, lien claimant has ten days to challenge the sufficiency of the bond amount or the surety. The court s determination is final. 1 Lien

More information

State P3 Legislation Matrix 1

State P3 Legislation Matrix 1 State P3 Legislation Matrix 1 Alabama Alaska Arizona Arkansas 2 Article 2: State Department of Ala. Code 23-1-40 Article 3: Public Roads, Bridges, and Ferries Ala. Code 23-1-80 to 23-1-95 Toll Road, Bridge

More information

Teacher Tenure: Teacher Due Process Rights to Continued Employment

Teacher Tenure: Teacher Due Process Rights to Continued Employment Alabama legislated Three school Incompetency, insubordination, neglect of duty, immorality, failure to perform duties in a satisfactory manner, justifiable decrease in the number of teaching positions,

More information

State By State Survey:

State By State Survey: Connecticut California Florida By Survey: Statutes of Limitations and Repose for Construction - Related Claims The Right Choice for Policyholders www.sdvlaw.com Statutes of Limitations and Repose 2 Statutes

More information

THE GENERAL ASSEMBLY OF PENNSYLVANIA HOUSE BILL

THE GENERAL ASSEMBLY OF PENNSYLVANIA HOUSE BILL PRIOR PRINTER'S NO. PRINTER'S NO. THE GENERAL ASSEMBLY OF PENNSYLVANIA HOUSE BILL No. 1 Session of 01 INTRODUCED BY ELLIS, IRVIN, RABB, MILNE, PICKETT, BAKER, DAVIS, QUIGLEY, BOBACK, CHARLTON, O'NEILL,

More information

National State Law Survey: Expungement and Vacatur Laws 1

National State Law Survey: Expungement and Vacatur Laws 1 1 State 1 Is expungement or sealing permitted for juvenile records? 2 Does state law contain a vacatur provision that could apply to victims of human trafficking? Does the vacatur provision apply to juvenile

More information

The Victim Rights Law Center thanks Catherine Cambridge for her research assistance.

The Victim Rights Law Center thanks Catherine Cambridge for her research assistance. The Victim Rights Law Center thanks Catherine Cambridge for her research assistance. Privilege and Communication Between Professionals Summary of Research Findings Question Addressed: Which jurisdictions

More information

STATE PRESCRIPTION MONITORING STATUTES AND REGULATIONS LIST

STATE PRESCRIPTION MONITORING STATUTES AND REGULATIONS LIST STATE PRESCRIPTION MONITORING STATUTES AND REGULATIONS LIST Research Current through June 2014. This project was supported by Grant No. G1399ONDCP03A, awarded by the Office of National Drug Control Policy.

More information

Chapter PERSONAL INFORMATION PROTECTION ACT. Article 01. BREACH OF SECURITY INVOLVING PERSONAL INFORMATION

Chapter PERSONAL INFORMATION PROTECTION ACT. Article 01. BREACH OF SECURITY INVOLVING PERSONAL INFORMATION Alaska Statute Chapter 45.48. PERSONAL INFORMATION PROTECTION ACT Article 01. BREACH OF SECURITY INVOLVING PERSONAL INFORMATION Sec. 45.48.010. Disclosure of breach of security. (a) If a covered person

More information

TABLE OF CONTENTS. Introduction. Identifying the Importance of ID. Overview. Policy Recommendations. Conclusion. Summary of Findings

TABLE OF CONTENTS. Introduction. Identifying the Importance of ID. Overview. Policy Recommendations. Conclusion. Summary of Findings 1 TABLE OF CONTENTS Introduction Identifying the Importance of ID Overview Policy Recommendations Conclusion Summary of Findings Quick Reference Guide 3 3 4 6 7 8 8 The National Network for Youth gives

More information

If it hasn t happened already, at some point

If it hasn t happened already, at some point An Introduction to Obtaining Out-of-State Discovery in State and Federal Court Litigation by Brenda M. Johnson If it hasn t happened already, at some point in your practice you will be faced with the prospect

More information

DEFINED TIMEFRAMES FOR RATE CASES (i.e., suspension period)

DEFINED TIMEFRAMES FOR RATE CASES (i.e., suspension period) STATE Alabama Alaska Arizona Arkansas California Colorado DEFINED TIMEFRAMES FOR RATE CASES (i.e., suspension period) 6 months. Ala. Code 37-1-81. Using the simplified Operating Margin Method, however,

More information

If you have questions, please or call

If you have questions, please  or call SCCE's 17th Annual Compliance & Ethics Institute: CLE Approvals By State The SCCE submitted sessions deemed eligible for general CLE credits and legal ethics CLE credits to most states with CLE requirements

More information

Intersections Data Breach. July

Intersections Data Breach. July Intersections Data Breach Consumer Notification Guide July 2010 www.intersections.com 888.283.1725 DataBreachServices@Intersections.com Table of contents Section I Introduction.......... 4 Section II

More information

UNIFORM NOTICE OF REGULATION A TIER 2 OFFERING Pursuant to Section 18(b)(3), (b)(4), and/or (c)(2) of the Securities Act of 1933

UNIFORM NOTICE OF REGULATION A TIER 2 OFFERING Pursuant to Section 18(b)(3), (b)(4), and/or (c)(2) of the Securities Act of 1933 Item 1. Issuer s Identity UNIFORM NOTICE OF REGULATION A TIER 2 OFFERING Pursuant to Section 18(b)(3), (b)(4), and/or (c)(2) of the Securities Act of 1933 Name of Issuer Previous Name(s) None Entity Type

More information

You are working on the discovery plan for

You are working on the discovery plan for A Look at the Law Obtaining Out-of-State Evidence for State Court Civil Litigation: Where to Start? You are working on the discovery plan for your case, brainstorming the evidence that you need to prosecute

More information

CRS Report for Congress

CRS Report for Congress Order Code RL32127 CRS Report for Congress Received through the CRS Web Summary of State Laws on the Issuance of Driver s Licenses to Undocumented Aliens Updated September 13, 2005 Alison M. Smith Legislative

More information

Employee must be. provide reasonable notice (Ala. Code 1975, ).

Employee must be. provide reasonable notice (Ala. Code 1975, ). State Amount of Leave Required Notice by Employee Compensation Exclusions and Other Provisions Alabama Time necessary to vote, not exceeding one hour. Employer hours. (Ala. Code 1975, 17-1-5.) provide

More information

State UCC Fraudulent Filing Statutes & Rules Compiled by Paul Hodnefield, Corporation Service Company August 3, 2015

State UCC Fraudulent Filing Statutes & Rules Compiled by Paul Hodnefield, Corporation Service Company August 3, 2015 State UCC Fraudulent Filing Statutes & Rules Compiled by Paul Hodnefield, Corporation Service Company August 3, 2015 The following list of fraudulent filing laws includes state statutes and administrative

More information

ANIMAL CRUELTY STATE LAW SUMMARY CHART: Court-Ordered Programs for Animal Cruelty Offenses

ANIMAL CRUELTY STATE LAW SUMMARY CHART: Court-Ordered Programs for Animal Cruelty Offenses The chart below is a summary of the relevant portions of state animal cruelty laws that provide for court-ordered evaluation, counseling, treatment, prevention, and/or educational programs. The full text

More information

1 HB By Representative Williams (P) 4 RFD: Technology and Research. 5 First Read: 13-FEB-18. Page 0

1 HB By Representative Williams (P) 4 RFD: Technology and Research. 5 First Read: 13-FEB-18. Page 0 1 HB410 2 191614-1 3 By Representative Williams (P) 4 RFD: Technology and Research 5 First Read: 13-FEB-18 Page 0 1 191614-1:n:02/13/2018:CMH*/bm LSA2018-168 2 3 4 5 6 7 8 SYNOPSIS: This bill would create

More information

Immigrant Caregivers:

Immigrant Caregivers: Immigrant Caregivers: The Implications of Immigration Status on Foster Care Licensure August 2017 INTRODUCTION All foster parents seeking to care for children in the custody of child welfare agencies must

More information

INSTITUTE of PUBLIC POLICY

INSTITUTE of PUBLIC POLICY INSTITUTE of PUBLIC POLICY Harry S Truman School of Public Affairs University of Missouri ANALYSIS OF STATE REVENUES AND EXPENDITURES Andrew Wesemann and Brian Dabson Summary This report analyzes state

More information

Effect of Nonpayment

Effect of Nonpayment Alabama Ala. Code 15-22-36.1 D may apply to the board of pardons and paroles for a Certificate of Eligibility to Register to Vote upon satisfaction of several requirements, including that D has paid victim

More information

State Law Guide UNEMPLOYMENT INSURANCE BENEFITS FOR DOMESTIC & SEXUAL VIOLENCE SURVIVORS

State Law Guide UNEMPLOYMENT INSURANCE BENEFITS FOR DOMESTIC & SEXUAL VIOLENCE SURVIVORS State Law Guide UNEMPLOYMENT INSURANCE BENEFITS FOR DOMESTIC & SEXUAL VIOLENCE SURVIVORS Some victims of domestic violence, sexual assault, or stalking need to leave their jobs because of the violence

More information

PERMISSIBILITY OF ELECTRONIC VOTING IN THE UNITED STATES. Member Electronic Vote/ . Alabama No No Yes No. Alaska No No No No

PERMISSIBILITY OF ELECTRONIC VOTING IN THE UNITED STATES. Member Electronic Vote/  . Alabama No No Yes No. Alaska No No No No PERMISSIBILITY OF ELECTRONIC VOTING IN THE UNITED STATES State Member Conference Call Vote Member Electronic Vote/ Email Board of Directors Conference Call Vote Board of Directors Electronic Vote/ Email

More information

Time Off To Vote State-by-State

Time Off To Vote State-by-State Time Off To Vote State-by-State Page Applicable Laws and Regulations 1 Time Allowed 7 Must Employee Be Paid? 11 Must Employee Apply? 13 May Employer Specify Hours? 16 Prohibited Acts 18 Penalties 27 State

More information

1 SB By Senators Orr and Holley. 4 RFD: Governmental Affairs. 5 First Read: 13-FEB-18. Page 0

1 SB By Senators Orr and Holley. 4 RFD: Governmental Affairs. 5 First Read: 13-FEB-18. Page 0 1 SB318 2 192523-5 3 By Senators Orr and Holley 4 RFD: Governmental Affairs 5 First Read: 13-FEB-18 Page 0 1 SB318 2 3 4 ENROLLED, An Act, 5 Relating to consumer protection; to require certain 6 entities

More information

STATE LAWS SUMMARY: CHILD LABOR CERTIFICATION REQUIREMENTS BY STATE

STATE LAWS SUMMARY: CHILD LABOR CERTIFICATION REQUIREMENTS BY STATE STATE LAWS SUMMARY: CHILD LABOR CERTIFICATION REQUIREMENTS BY STATE THE PROBLEM: Federal child labor laws limit the kinds of work for which kids under age 18 can be employed. But as with OSHA, federal

More information

28 USC 152. NB: This unofficial compilation of the U.S. Code is current as of Jan. 4, 2012 (see

28 USC 152. NB: This unofficial compilation of the U.S. Code is current as of Jan. 4, 2012 (see TITLE 28 - JUDICIARY AND JUDICIAL PROCEDURE PART I - ORGANIZATION OF COURTS CHAPTER 6 - BANKRUPTCY JUDGES 152. Appointment of bankruptcy judges (a) (1) Each bankruptcy judge to be appointed for a judicial

More information

2016 Voter Registration Deadlines by State

2016 Voter Registration Deadlines by State 2016 Voter s by Alabama 10/24/2016 https://www.alabamavotes.gov/electioninfo.aspx?m=vote rs Alaska 10/9/2016 (Election Day registration permitted for purpose of voting for president and Vice President

More information

1 SB By Senators Orr and Holley. 4 RFD: Governmental Affairs. 5 First Read: 13-FEB-18. Page 0

1 SB By Senators Orr and Holley. 4 RFD: Governmental Affairs. 5 First Read: 13-FEB-18. Page 0 1 SB318 2 192523-4 3 By Senators Orr and Holley 4 RFD: Governmental Affairs 5 First Read: 13-FEB-18 Page 0 1 SB318 2 3 4 ENGROSSED 5 6 7 A BILL 8 TO BE ENTITLED 9 AN ACT 10 11 Relating to consumer protection;

More information

RESTORATION IN ADULT GUARDIANSHIPS (STATUTES)

RESTORATION IN ADULT GUARDIANSHIPS (STATUTES) RESTORATION IN ADULT GUARDIANSHIPS (STATUTES) June 2013 All fifty states have enacted laws addressing termination of adult guardianship upon the individual s regaining capacity. A number of statutes are

More information

50 State Desktop Reference

50 State Desktop Reference 50 State Desktop Reference What Businesses Need To Know About n-compete and Trade Secrets Law 2017 2018 EDITION Dear Clients and Friends, We are pleased to provide you with the 2017 2018 edition of our

More information

Right to Try: It s More Complicated Than You Think

Right to Try: It s More Complicated Than You Think Vol. 14, No. 8, August 2018 Happy Trials to You Right to Try: It s More Complicated Than You Think By David Vulcano A dying patient who desperately wants to try an experimental medication cares about speed,

More information

State Statutory Authority for Restoration of Rights in Termination of Adult Guardianship

State Statutory Authority for Restoration of Rights in Termination of Adult Guardianship State Statutory Authority for Restoration of Rights in Termination of Adult Guardianship Guardianships 1 are designed to protect the interest of incapacitated adults. Guardianship is the only proceeding

More information

WYOMING POPULATION DECLINED SLIGHTLY

WYOMING POPULATION DECLINED SLIGHTLY FOR IMMEDIATE RELEASE Wednesday, December 19, 2018 Contact: Dr. Wenlin Liu, Chief Economist WYOMING POPULATION DECLINED SLIGHTLY CHEYENNE -- Wyoming s total resident population contracted to 577,737 in

More information

Rhoads Online State Appointment Rules Handy Guide

Rhoads Online State Appointment Rules Handy Guide Rhoads Online Appointment Rules Handy Guide ALABAMA Yes (15) DOI date approved 27-7-30 ALASKA Appointments not filed with DOI. Record producer appointment in SIC register within 30 days of effective date.

More information

National State Law Survey: Statute of Limitations 1

National State Law Survey: Statute of Limitations 1 National State Law Survey: Limitations 1 Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware DC Florida Georgia Hawaii limitations Trafficking and CSEC within 3 limit for sex trafficking,

More information

Speedy Trial Statutes in Cases Involving Child Victims and Witnesses Updated May 2011

Speedy Trial Statutes in Cases Involving Child Victims and Witnesses Updated May 2011 Speedy Trial Statutes in Cases Involving Child Victims and Witnesses Updated May 2011 This compilation contains legislation, session laws, and codified statues. All statutes, laws, and bills listed in

More information

Official Voter Information for General Election Statute Titles

Official Voter Information for General Election Statute Titles Official Voter Information for General Election Statute Titles Alabama 17-6-46. Voting instruction posters. Alaska Sec. 15.15.070. Public notice of election required Sec. 15.58.010. Election pamphlet Sec.

More information

50 State DESKTOP REFERENCE. What Employers Need To Know About Non-Compete and Trade Secrets Law EDITION

50 State DESKTOP REFERENCE. What Employers Need To Know About Non-Compete and Trade Secrets Law EDITION 50 State DESKTOP REFERENCE What Employers Need To Know About n-compete and Trade Secrets Law 2016-2017 EDITION Dear Clients and Friends, We are pleased to provide you with the 2016 2017 edition of our

More information

According to the Bureau of Justice Statistics, guilty pleas in 1996 accounted for 91

According to the Bureau of Justice Statistics, guilty pleas in 1996 accounted for 91 U.S. Department of Justice Office of Justice Programs Office for Victims of Crime NOVEMBER 2002 Victim Input Into Plea Agreements LEGAL SERIES #7 BULLETIN Message From the Director Over the past three

More information

STATE STANDARDS FOR EMERGENCY EVALUATION

STATE STANDARDS FOR EMERGENCY EVALUATION STATE STANDARDS FOR EMERGENCY EVALUATION UPDATED: JULY 2018 200 NORTH GLEBE ROAD, SUITE 801 ARLINGTON, VIRGINIA 22203 (703) 294-6001 TreatmentAdvocacyCenter.org Alabama ALA. CODE 22-52-91(a). When a law

More information

Limitations on Contributions to Political Committees

Limitations on Contributions to Political Committees Limitations on Contributions to Committees Term for PAC Individual PAC Corporate/Union PAC Party PAC PAC PAC Transfers Alabama 10-2A-70.2 $500/election Alaska 15.13.070 Group $500/year Only 10% of a PAC's

More information

Appendix 6 Right of Publicity

Appendix 6 Right of Publicity Last Updated: July 2016 Appendix 6 Right of Publicity Common-Law State Statute Rights Survives Death Alabama Yes Yes 55 Years After Death (only applies to soldiers and survives soldier s death) Alaska

More information

Matthew Miller, Bureau of Legislative Research

Matthew Miller, Bureau of Legislative Research Matthew Miller, Bureau of Legislative Research Arkansas (reelection) Georgia (reelection) Idaho (reelection) Kentucky (reelection) Michigan (partisan nomination - reelection) Minnesota (reelection) Mississippi

More information

Table 1. Comparison of Creditor s Rights Provisions Of the Uniform LP Act and the Uniform LLC Act

Table 1. Comparison of Creditor s Rights Provisions Of the Uniform LP Act and the Uniform LLC Act Table 1 Comparison of Creditor s Rights Provisions Of the Uniform LP Act and the Uniform LLC Act Creditor s rights statute derived from 703 of the Revised Uniform Limited Partnership Act (1976) On application

More information

THE PROCESS TO RENEW A JUDGMENT SHOULD BEGIN 6-8 MONTHS PRIOR TO THE DEADLINE

THE PROCESS TO RENEW A JUDGMENT SHOULD BEGIN 6-8 MONTHS PRIOR TO THE DEADLINE THE PROCESS TO RENEW A JUDGMENT SHOULD BEGIN 6-8 MONTHS PRIOR TO THE DEADLINE STATE RENEWAL Additional information ALABAMA Judgment good for 20 years if renewed ALASKA ARIZONA (foreign judgment 4 years)

More information

Issue Brief. A Public Policy Paper of the National Association of Mutual Insurance Companies July 2005

Issue Brief. A Public Policy Paper of the National Association of Mutual Insurance Companies July 2005 A Public Policy Paper of the National Association of Mutual Insurance Companies July 2005 By David B. Reddick State Affairs Manager Southeast Region Executive Summary State legislators have moved quickly

More information

Case 3:15-md CRB Document 4700 Filed 01/29/18 Page 1 of 5

Case 3:15-md CRB Document 4700 Filed 01/29/18 Page 1 of 5 Case 3:15-md-02672-CRB Document 4700 Filed 01/29/18 Page 1 of 5 Michele D. Ross Reed Smith LLP 1301 K Street NW Suite 1000 East Tower Washington, D.C. 20005 Telephone: 202 414-9297 Fax: 202 414-9299 Email:

More information