State Laws

These materials were obtained directly from the State Legislative website and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.

Alabama

Alabama Consumer Identity Protection Act (Ala. Code § 13A-8-190 - § 13A-8-201)

Alabama Data Breach Notification Act of 2018 (Ala. Code 1975, § 8-38-3)

Alabama Data Disposal Law (Ala. Code § 8-38-10)

Alabama Deceptive Trade Practices Act (Ala. Code §8-19-1, et seq.)

Alaska

Alaska Breach of Security Involving Personal Information (AS § 45.48.010 – § 45.48.090)

Alaska Consumer Protection Act (AS § 45.50.471, et seq.)

Alaska Data Disposal (AS § 45.48.500, et seq.)

Alaska Limitation on Electronic Mail (AS § 45.50.479)

Arizona

Arizona Commercial Electronic Mail (AZ Rev Stat § 44-1372 - § 44-1372.05)

Arizona Confidentiality of Personal Identifying Information (AZ Rev Stat § 44-1373, et seq.)

Arizona Data Disposal (AZ Rev Stat § 44-7601)

Arizona Data Security Breaches (AZ Rev Stat § 18-551 - § 18-552)

Arkansas

Arkansas Computer Crime (A.C.A. § 5-41-101, et seq.)

Arkansas Consumer Protection Against Computer Spyware Act (A.C.A. § 4-111-101, et seq.)

Arkansas Data Disposal (A.C.A. § 4-110-103 - § 4-110-104)

Arkansas Misappropriation of Social Security Numbers (A.C.A. § 4-86-107)

California

California Anti-Phishing Act of 2005 (CA Bus & Prof Code § 22948 - § 22948.3)

California Automatic Purchase Renewals (CA Bus & Prof Code § 17600 - § 17606)

California Business Privacy Resources

California Computer Crimes (Cal. Pen. Code § 502 - § 502.01)

Colorado

Colorado Computer Crime (C.R.S. § 18-5.5-101, et seq.)

Colorado Confidentiality of Social Security Numbers (C.R.S. § 6-1-715)

Colorado Consumer Data Protection Laws: FAQ’s for Businesses and Government Agencies

Colorado Data Disposal Law (C.R.S. § 6-1-713, et seq.)

Connecticut

Connecticut Breach of Data Security (Conn. Gen. Stat. § 36a-701b)

Connecticut Computer Crimes (Conn. Gen. Stat. § 53-451 - § 53-454 and Conn. Gen. Stat. § 53a-250, et seq.)

Connecticut Data Disposal Law (Conn. Gen. Stat. § 42-471)

Connecticut Display and Use of Social Security Numbers (Conn. Gen. Stat. § 42-470 - § 42-472d)

Delaware

Delaware Computer Security Breaches (Del. Code tit. 6 § 12B-100 - § 12B-104)

Delaware Computer-Related Offenses (11 DE Code § 931 - § 936)

Delaware Data Disposal (6 DE Code § 5001C - § 5004C)

Delaware Online Privacy and Protection Act (“DelOPPA”) (Del. Code tit. 6 § 1201C - § 1206C)

District of Columbia

District of Columbia Ban on Automated Dialing Systems & Telephone Fraud (D.C. Code § 34-1701, D.C. Code § 22–3226.01 - § 22–3226.15)

District of Columbia Consumer Security Breach Notification (D.C. Code § 28-3851 - § 28-3853)

District of Columbia Electronic Mail Spam Deterrence (D.C. Code § 5001 - § 28-5003)

District of Columbia Identity Theft (D.C. Code § 22–3227.01 - § 22–3227.08)

Florida

Florida Anti-Phishing Act (Fla. Stat. § 668.701 - § 668.705)

Florida Computer Abuse and Data Recovery Act (Fla. Stat. § 668.801 - § 668.805)

Florida Data Disposal (Fla. Stat. § 501.171(8))

Florida Do Not Call Act (Fla. Stat. § 501.059)

Georgia

Georgia Computer Systems Protection Act (Ga. Code § 16-9-90 - § 16-9-109.1)

Georgia Data Disposal Law (Ga. Code § 10-15-2)

Georgia Deceptive Commercial Email (Ga. Code Ann. § 16-9-100 - § 16-9-109.1)

Georgia Deceptive, Fraudulent, or Abusive Telemarketing (Ga. Code § 10-5B-1 - § 10-5B-8)

Hawaii

Hawaii Abusive Telemarketing Acts or Practices (Haw. Rev. Stat. § 481p-1 - § 481p-8, Haw. Rev. Stat. § 708-835.6)

Hawaii Computer Crime (Haw. Rev. Stat. § 708-890 - § 708-895.7)

Hawaii Data Disposal Law (Haw. Rev. Stat. §§ 487R-1, 487R-2, 487R-3)

Hawaii Identity Theft (Haw. Rev. Stat. § 708-839, § 708-895.55, § 708-839.6, § 708-839.7, § 708-839.8)

Idaho

Idaho Disclosure of Breach of Security (Idaho Code § 28-51-104 - § 28-51-107)

Idaho Identity Theft (Idaho Code § 28-51-103 - § 28-51-107)

Idaho Resources / Links

Idaho Telephone Solicitation Act (Idaho Code § 48-1001 - § 48-1010)

Illinois

Illinois Anti-Phishing Act (740 ILCS § 7/1 - § 7/15)

Illinois Biometric Information Privacy Act (740 ILCS § 14/1 - § 14/99)

Illinois Data Disposal Law (815 ILCS § 530/30 - § 530/40)

Illinois Electronic Mail Act (815 ILCS 511/1)

Indiana

Indiana Consumer Data Protection

Indiana Consumer Data Protection Act ("ICDPA")

Indiana Data Disposal Law (Ind. Code §§ 24-4-14-8, Ind. Code § 24-4.9-3-3.5 - § 24-4.9-4-2)

Indiana Deceptive Commercial Electronic Mail (Ind. Code § 24-5-22 - § 24-5-22-10)

Iowa

Iowa Computer Crime (Iowa Code § 716.6B, Iowa Code § 715.1 - § 715.8)

Iowa Consumer Data Protection Act (“ICDPA”)

Iowa Electronic Mail (Iowa Code § 716A.1 - § 716A.7)

Iowa Identity Theft (Iowa Code § 715A.8 - § 715A.9A, § 714.16B)

Kansas

Kansas Commercial Electronic Mail Act (K.S.A. § 50-6,107)

Kansas Data Disposal Law (K.S.A. § 50-6,139b)

Kansas Data Security Breach Notification (K.S.A. § 50-7a01, et seq.)

Kansas Identity Theft (K.S.A. § 50-6,139)

Kentucky

Kentucky Data Disposal (KRS § 365.720 - § 365.730)

Kentucky False Advertising (KRS § 517.030)

Kentucky Negative Option Plan (KRS § 367.570 - § 367-585)

Kentucky Resources / Links

Louisiana

Louisiana Anti-Phishing Act (La. Rev. Stat. § 51:2021 - § 51:2034)

Louisiana Computer Spyware (La. Rev. Stat. § 51:2006 - § 51:2014)

Louisiana Data Disposal (La. Rev. Stat. § 51:3074(B))

Louisiana Database Security Breach Notification Law (La. Rev. Stat. § 51:3071 - § 51:3077, La. Admin. Code tit. 16, pt. III, § 701)

Maine

Maine Electronic Mail Solicitation (MRS Title 10 § 1497)

Maine Notice of Risk to Personal Data (Data Breach) (Me. Rev. Stat. tit 10 § 1346, et seq.)

Maine Privacy of broadband Internet Access Service Customer Personal Information (MRS Title 35-A § 9301)

Maine Required Disclosures to Consumers (MRS Title 10 § 1210 - § 1210-B)

Maryland

Maryland Business Opportunity Sales Act (MD. Business Regulation Code Ann. § 14-101)

Maryland Commercial Electronic Mail (MD. Commercial Law Code Ann. § 14-3001 - § 14-3003)

Maryland Crimes Involving Telecommunications and Electronics (MD. Criminal Law Code Ann. § 7-301 - § 7-318)

Maryland Data Disposal (MD. Commercial Law Code Ann. § 14-3502)

Massachusetts

Massachusetts Consumer Protection Act (MGL c.93A § 1 - § 11)

Massachusetts Data Disposal (MGL c. 93I, § 2)

Massachusetts Resources / Links

Massachusetts Security Breaches (MGL c. 93H, § 1 - § 6)

Michigan

Michigan Children's Protection Registry Act (Mich. Comp. Laws § 752.1061 - § 752.1068)

Michigan Data Breach (Mich. Comp. Laws § 445.63, § 445.72, et seq.)

Michigan Data Disposal (Mich. Comp. Laws § 445.71a)

Michigan Facsimile Machines (Mich. Comp. Laws § 445.1771 – § 445.1776)

Minnesota

Minnesota Disclosure of Data Security Breach (Minn. Stat. § 13.055, § 13.09, § 325E.61, § 325E.64)

Minnesota Facsimile Advertising (Minn. Stat. § 325E.395)

Minnesota False or Misleading Commercial Electronic Mail Messages (Minn. Stat. § 325F.694)

Minnesota Resources / Links

Mississippi

Mississippi An Act to Require Notice of a Breach of Security (Miss. Code Ann. § 75-24-29)

Mississippi Computer Crimes and Identity Theft (Miss. Code Ann. § 97-45-1 — § 97-45-33)

Mississippi False Advertising (Miss. Code Ann. § 97-23-1 - § 97-23-5)

Mississippi Fraud by Mail or Other Means of Communication (Miss. Code Ann. § 97-19-83)

Missouri

Missouri Electronic Mail Practices & Unsolicited Commercial Email (MO Rev Stat § 407.1120 - § 407.1141)

Missouri Notification of Breach of Security (Mo. Rev. Stat. § 407.1500)

Missouri Posting Certain Information over the Internet (MO Rev Stat § 565.240 - § 565.252)

Missouri Resources / Links

Montana

Montana Computer Security Breach (Mont. Code Ann. § 30-14-1701 - § 30-14-1704)

Montana Consumer Data Privacy Act (“CDPA”)

Montana Data Disposal (Mont. Code Ann. § 30-14-1703)

Montana Impediment of Identity Theft (Mont. Code Ann. § 30-14-1701, et seq.)

Nebraska

Nebraska Data Disposal (Neb. Rev. Stat. § 87-808(1))

Nebraska False Advertising (Neb. Rev. Stat. § 28-1476 - § 28-1478)

Nebraska Financial Data Protection and Consumer Notification of Data Security Breach Act of 2006 (Neb. Rev. Stat. § 87-801 - § 87-808)

Nebraska Resources / Links

Nevada

Nevada Data Disposal (Nev. Rev. Stat. § 603A.200)

Nevada Liability of Persons Who Transmit Items of Electronic Mail that Include Advertisements (Nev. Rev. Stat. § 41.705 - § 41.735, Nev. Rev. Stat. § 205.492, § 205.511, § 205.513)

Nevada Resource Links

Nevada Security and Privacy of Personal Information (Data Breach) (Nev. Rev. Stat. § 603A.010, et seq.)

New Hampshire

New Hampshire Computer Crime (N.H. Rev. Stat. § 638:16 - § 638:19)

New Hampshire Computer Spyware (N.H. Rev. Stat. § 359-H:1 - § 359-H:6)

New Hampshire Identity Fraud (N.H. Rev. Stat. § 638:25 - § 638:27)

New Hampshire Identity Theft (N.H. Rev. Stat. § 359-I:1 - § 359-I:4)

New Jersey

New Jersey Data Disposal (NJ Rev Stat § 56:8-161 - § 56:8-162)

New Jersey Facsimile Advertisements (NJ Rev Stat § 56:8-157 - § 56:8-160)

New Jersey Identity Theft Prevention Act (NJ Rev Stat § 56:11-44 - § 56:11-52, NJ Admin Code § 13:45F-1.1 - § 13:45F‐5.2)

New Jersey Personal Information and Privacy Protection Act (NJ Rev Stat § 56:11-53 - § 56:11-55)

New Mexico

New Mexico Computer Crimes Act (NM Stat § 30-45-1 - § 30-45-7)

New Mexico Data Breach Notification (NM Stat § 57-12C-1 - § 57-12C-12)

New Mexico Data Disposal (NM Stat § 57-12C-3)

New Mexico Fraudulent Telemarketing Act (NM Stat § 30-50-1 - § 30-50-4, NM Stat § 57-12-22)

New York

New York Anti-Phishing Act of 2006 (NY Gen. Bus. Law § 390-B)

New York Confidentiality of Social Security Account Number (NY Gen. Bus. Law § 399-DDD, § 399-DDD-2)

New York Data Disposal (NY Gen. Bus. Law § 399-H)

New York Domain Names Cyber Piracy Protections Act (NY Gen. Bus. Law § 146 - § 149)

North Carolina

North Carolina Computer Related Crimes (NC Gen. Stat. § 14-453, et seq.)

North Carolina Data Breach (NC Gen. Stat. § 75-61, § 75-65, NC Gen. Stat. § 14-113.20)

North Carolina Data Disposal (NC Gen. Stat. § 75-64)

North Carolina Identity Theft Protection Act (N.C. Gen. Stat. § 75-60 - § 75-66, NC Gen Stat § 14-113.20, et seq., NC Gen Stat § 1-539.2C)

North Dakota

North Dakota Commercial Electronic Mail Consumer Protection (N.D. Cent. Code § 51-27-01, et seq.)

North Dakota Data Processing Information Confidentiality (N.D. Cent. Code § 51-22-01, et seq.)

North Dakota Identity Fraud (N.D. Cent. Code § 51-31-01, et seq.)

North Dakota Notice of Security Breach for Personal Information (N.D. Cent. Code § 51-30-01, et seq.)

Ohio

Ohio Advertising by Facsimile Device (Ohio Rev. Code § 4931.10, § 4931.99)

Ohio Business Opportunity Plans (Ohio Rev. Code § 1334.01, et seq.)

Ohio Commercial Electronic Mail Messages (Ohio Rev. Code § 2913.421, § 2307.64)

Ohio Data Security Law - Safe Harbor Requirements (Ohio Rev. Code § 1354.01, et seq.)

Oklahoma

Oklahoma Anti-Phishing Act (15 OK Stat § 15-776.8 - § 15-776.20)

Oklahoma Commercial Solicitation by Facsimile Device (21 OK Stat § 21-1862, et seq.)

Oklahoma Commercial Telephone Solicitation Act (15 OK Stat § 15-775A.1 - § 15-775A.5)

Oklahoma Computer Crimes Act (21 OK Stat § 21-1951 - § 21-1959)

Oregon

Oregon Consumer Information Protection Act (OR Rev Stat § 646A.600 - § 646A.628)

Oregon Consumer Privacy Act ("OCPA")

Oregon Data Disposal (OR Rev Stat § 646A.622)

Oregon Identity Theft (OR Rev Stat § 165.800, § 165.803)

Pennsylvania

Pennsylvania Breach of Personal Information Notification Act (73 P.S. § 2301 – § 2329)

Pennsylvania Consumer Protection Against Computer Spyware Act (73 P.S. § 2330.1 - § 2330.20)

Pennsylvania Identity Theft (18 Pa.C.S.A. § 4120)

Pennsylvania Resources / Links

Rhode Island

Rhode Island Computer Crime (R.I. Gen. Laws § 11-52-1, et seq.)

Rhode Island Consumer Empowerment and Identity Theft Prevention Act of 2006 (R.I. Gen. Laws § 6-48-8)

Rhode Island Data Disposal (R.I. Gen. Laws § 6-52-1, et seq.)

Rhode Island Electronic Mail Fraud Regulatory Act (R.I. Gen. Laws § 6-49-1, et seq., R.I. Gen. Laws § 6-47-2)

South Carolina

South Carolina Breach of Security of Business Data (SC Code § 39-1-90)

South Carolina Business Opportunity Sales Act (SC Code § 39-57-10)

South Carolina Consumer Identity Theft Protection (SC Code § 37-20-110, et seq.)

South Carolina Data Disposal (SC Code § 37-20-190)

South Dakota

South Dakota Business Opportunities (SD Codified L § 37-25A-1, et seq.)

South Dakota Computer Crime (SD Codified L § 43-43B-1, et seq.)

South Dakota Identity Theft (SD Codified L § 22-40-8)

South Dakota Notice of Breach (SD Codified Laws § 22-40-19 - § 22-40-26)

Tennessee

Tennessee Anti-Phishing Act of 2006 (Tenn. Code Ann. § 47-18-5201, et seq.)

Tennessee Consumer Telemarketing Protection (Tenn. Code Ann. § 47-18-1501, et seq.)

Tennessee Data Disposal (Tenn. Code Ann. § 39-14-150(g))

Tennessee Disclosure of Data Security Breach (Tenn. Code Ann. § 47-18-2107)

Texas

Texas Anti-Phishing Act (Tex. Bus. & Com. Code § 325.001, et seq.)

Texas Biometric Identifiers (TX Bus & Com Code § 503.001)

Texas Computer Crimes (TX Penal Code § 33.01, et seq.)

Texas Data Breach Notification (Tex. Bus. & Com. Code § 521.002, § 521.053, § 521.151, § 521.152)

Utah

Utah Business Guide to Online Trial Offers, Product Memberships, and Negative Options

Utah Business Opportunity Disclosure Act (UT Code § 13-15-101, et seq.)

Utah Consumer Privacy Act (Effective 12/31/2023) (Utah Code § 13-61-101, et seq.)

Utah Consumer Privacy Act (“UCPA”) (Utah Code § 13-61-101, et seq.) (Effective 12/31/2023)

Vermont

Vermont Computer Crimes (13 V.S.A. § 4101, et seq.)

Vermont Data Brokers (9 V.S.A. § 2446, et seq.)

Vermont Data Disposal (9 V.S.A. § 2445)

Vermont Electronic Communication Privacy Act (13 V.S.A. § 8101, et seq.)

Virginia

Automatic Renewal Offers and Continuous Service Offers (VA Code § 59.1-207.45, et seq.)

Business Opportunity Sales Act (VA Code § 59.1-262, et seq.)

Electronic Identity Management Act (VA Code § 59.1-550, et seq.)

Virginia Breach of Personal Information Notification (Va. Code § 18.2-186.6, et seq.)

Washington

Washington Biometric Identifiers (WA Rev Code § 19.375.010, et seq.)

Washington Business Opportunity Fraud Act (WA Rev Code § 19.110.010, et seq.)

Washington Commercial Electronic Mail (WA Rev Code § 19.190.010, et seq.)

Washington Data Disposal (WA Rev Code § 19.215.005 - § 19.215.030)

West Virginia

West Virginia Breach of Security of Consumer Information (WV Code § 46A-2A-101, et seq.)

West Virginia Computer Crime and Abuse Act (WV Code § 61-3C-1 - § 61-3C-21)

West Virginia Electronic Mail Protection Act (WV Code § 46A-6G-1 - § 46A-6G-5)

West Virginia Resource Links

Wisconsin

Wisconsin Computer Crimes (WI Stat § 943.70)

Wisconsin Data Disposal (WI Stat § 134.97)

Wisconsin Notice of Unauthorized Acquisition of Personal Information (Data Breach) (WI Stat § 134.98)

Wisconsin Prohibition of Certain Unsolicited Messages by Facsimile Machine (WI Stat § 134.72)

Wyoming

Wyoming Commercial Electronic Mail (WY Stat § 40-12-401, et seq.)

Wyoming Computer Crimes (WY Stat § 6-3-501, et seq.)

Wyoming Identity Theft (WY Stat § 6-3-901, et seq.)

Wyoming Resources / Links

U.S. Territory - Guam

Guam Notification of Breaches of Personal Information (9 G.C.A. § 48.10, et seq.)

Guam Regulation of Telemarketing (5 G.C.A. § 32301, et seq.)

Guam Social Security Number Confidentiality Act (5 G.C.A. § 32701, et seq.)

U.S. Territory - Puerto Rico

Puerto Rico Data Breach Notification (10 P.R. Laws Ann. §§ 4051, et seq.)

Puerto Rico Telemarketing Fraud Prevention Act (P.R. Laws tit. 10, § 4031, et seq.)

U.S. Territory - U.S. Virgin Islands

Virgin Islands Computer Crimes and Technology Act of 2013 (14 V.I.C. § 459, et seq.)

Virgin Islands Notices of Security Breach (14 V.I.C. § 2201, § 2208, § 2209 - § 2212)

Virgin Islands Telemarketing (12A V.I.C. § 303, § 310, § 327 - § 336)

Virgin Islands The Identity Theft Prevention Act (14 V.I.C. § 2220, et seq.)

Return To Legal Compliance Guides & Checklists