US State Laws

State Laws & Resources

CLIClaw offers a comprehensive suite of legal compliance resources designed to empower businesses and professionals with the knowledge they need to navigate the complexities of U.S. State laws. You gain exclusive access to a curated collection of links to relevant statutes, detailed articles, and official documents, ensuring you stay informed about regulatory requirements and legal updates. Whether you're seeking clarity on specific regulations or staying abreast of changes in the legal landscape, our platform provides the essential tools and information to support effective compliance and risk management.

These materials were obtained directly from the State Legislative website and are posted here for your review and reference only. No Claim to Original State Government Works. This may not be the most recent version. The State may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.

By Category

AI (Artificial Intelligence)

Colorado Artificial Intelligence Act (“CAIA”)

Business Opportunity Marketing (Biz Opp)

Florida Sale or Lease of Business Opportunities (Fla. Stat. § 559.80 - § 559.815)
Maryland Business Opportunity Sales Act (MD. Business Regulation Code Ann. § 14-101)
Ohio Business Opportunity Plans (Ohio Rev. Code § 1334.01, et seq.)
South Carolina Business Opportunity Sales Act (SC Code § 39-57-10)

Data Breach

Alabama Data Breach Notification Act of 2018 (Ala. Code 1975, § 8-38-3)
Alaska Breach of Security Involving Personal Information (AS § 45.48.010 – § 45.48.090)
Arizona Data Security Breaches (AZ Rev Stat § 18-551 - § 18-552)
Arizona Notification for Compromised Personal Information (Ariz. Rev. Stat. § 44-7501)

Data Broker

California Data Broker Registration ("Delete Act") (Cal. Civ. Code § 1798.99.80 - § 1798.99.88)
CCPA Data Broker Registration (CA Civ Code § 1798.99.80)
Data Broker Registration (The Delete Act) (Cal. Civ. Code § 1798.99.80 - 1798.99.89)
Vermont Data Brokers (9 V.S.A. § 2446, et seq.)

Data Security

Alabama Data Disposal Law (Ala. Code § 8-38-10)
Alaska Data Disposal (AS § 45.48.500, et seq.)
Alaska Protection of Social Security Number (AS § 45.48.400, et seq.)
Arizona Confidentiality of Personal Identifying Information (AZ Rev Stat § 44-1373, et seq.)

Email Marketing

Alaska Limitation on Electronic Mail (AS § 45.50.479)
Arizona Commercial Electronic Mail (AZ Rev Stat § 44-1372 - § 44-1372.05)
Arizona Internet Representations (AZ Rev Stat § 18-541, et seq.)
California Restrictions on Unsolicited Commercial Email Advertisers (CA Bus & Prof Code § 17529 - § 17529.9)

Privacy

Alaska Consumer Protection Act (AS § 45.50.471, et seq.)
Alaska Personal Information Protection Act (“APIPA”) (AS § 45.48.010 – § 45.48.990)
California Consumer Privacy Act of 2018 ("CCPA") (Cal. Civ. Code § 1798.100 - § 1798.199.100)
California Consumer Protection Against Computer Spyware Act (CA Bus & Prof Code § 22947 - § 22947.6)

Telemarketing / SMS

Alabama Telemarketing Act (Ala. Code § 8-19A-1, et seq.)
Alabama Telephone Solicitations (Ala. Code §8-19C-1, et seq.)
Alaska Telephonic Solicitations Act (AS § 45.63.010 - 45.63.100, AS § 45.50.475)
Arizona Telephone Solicitations (AZ Rev Stat § 44-1271 - § 44-1282)

Alaska

Alaska Breach of Security Involving Personal Information (AS § 45.48.010 – § 45.48.090)
Alaska Consumer Protection Act (AS § 45.50.471, et seq.)
Alaska Data Disposal (AS § 45.48.500, et seq.)
Alaska Limitation on Electronic Mail (AS § 45.50.479)

Alabama

Alabama Consumer Identity Protection Act (Ala. Code § 13A-8-190 - § 13A-8-201)
Alabama Data Breach Notification Act of 2018 (Ala. Code 1975, § 8-38-3)
Alabama Data Disposal Law (Ala. Code § 8-38-10)
Alabama Deceptive Trade Practices Act (Ala. Code §8-19-1, et seq.)

Arizona

Arizona Commercial Electronic Mail (AZ Rev Stat § 44-1372 - § 44-1372.05)
Arizona Confidentiality of Personal Identifying Information (AZ Rev Stat § 44-1373, et seq.)
Arizona Data Disposal (AZ Rev Stat § 44-7601)
Arizona Data Security Breaches (AZ Rev Stat § 18-551 - § 18-552)

Arkansas

Arkansas Computer Crime (A.C.A. § 5-41-101, et seq.)
Arkansas Consumer Protection Against Computer Spyware Act (A.C.A. § 4-111-101, et seq.)
Arkansas Data Disposal (A.C.A. § 4-110-103 - § 4-110-104)
Arkansas Misappropriation of Social Security Numbers (A.C.A. § 4-86-107)

California

California Anti-Phishing Act of 2005 (CA Bus & Prof Code § 22948 - § 22948.3)
California Automatic Purchase Renewals (CA Bus & Prof Code § 17600 - § 17606)
California Computer Crimes (Cal. Pen. Code § 502 - § 502.01)
California Confidentiality of Social Security Numbers (Cal. Civ. Code § 1798.85 - § 1798.89)

Colorado

Colorado Artificial Intelligence Act (“CAIA”)
Colorado Computer Crime (C.R.S. § 18-5.5-101, et seq.)
Colorado Confidentiality of Social Security Numbers (C.R.S. § 6-1-715)
Colorado Consumer Data Protection Laws: FAQ’s for Businesses and Government Agencies

Connecticut

Connecticut Breach of Data Security (Conn. Gen. Stat. § 36a-701b)
Connecticut Computer Crimes (Conn. Gen. Stat. § 53-451 - § 53-454 and Conn. Gen. Stat. § 53a-250, et seq.)
Connecticut Consumer Data Privacy and Online Monitoring (“CTDPA”) (Conn. Gen. Stat. § 42-515, et seq.)
Connecticut Data Breach Safe Harbor Law (Conn. Gen. Stat. § 42-901) (July 6, 2021)

Delaware

Delaware Computer Security Breaches (Del. Code tit. 6 § 12B-100 - § 12B-104)
Delaware Computer-Related Offenses (11 DE Code § 931 - § 936)
Delaware Data Disposal (6 DE Code § 5001C - § 5004C)
Delaware Online Privacy and Protection Act (“DelOPPA”) (Del. Code tit. 6 § 1201C - § 1206C)

District of Columbia

District of Columbia Ban on Automated Dialing Systems & Telephone Fraud (D.C. Code § 34-1701, D.C. Code § 22–3226.01 - § 22–3226.15)
District of Columbia Consumer Security Breach Notification (D.C. Code § 28-3851 - § 28-3853)
District of Columbia Electronic Mail Spam Deterrence (D.C. Code § 5001 - § 28-5003)
District of Columbia Identity Theft (D.C. Code § 22–3227.01 - § 22–3227.08)

Florida

Automatic Renewal of Service Contracts (Fla. Stat. § 501.165)
Florida Anti-Phishing Act (Fla. Stat. § 668.701 - § 668.705)
Florida Computer Abuse and Data Recovery Act (Fla. Stat. § 668.801 - § 668.805)
Florida Data Disposal (Fla. Stat. § 501.171(8))

Georgia

Georgia Computer Systems Protection Act (Ga. Code § 16-9-90 - § 16-9-109.1)
Georgia Data Disposal Law (Ga. Code § 10-15-2)
Georgia Deceptive Commercial Email (Ga. Code Ann. § 16-9-100 - § 16-9-109.1)
Georgia Deceptive, Fraudulent, or Abusive Telemarketing (Ga. Code § 10-5B-1 - § 10-5B-8)

Hawaii

Hawaii Abusive Telemarketing Acts or Practices (Haw. Rev. Stat. § 481p-1 - § 481p-8, Haw. Rev. Stat. § 708-835.6)
Hawaii Computer Crime (Haw. Rev. Stat. § 708-890 - § 708-895.7)
Hawaii Data Disposal Law (Haw. Rev. Stat. §§ 487R-1, 487R-2, 487R-3)
Hawaii Identity Theft (Haw. Rev. Stat. § 708-839, § 708-895.55, § 708-839.6, § 708-839.7, § 708-839.8)

Idaho

Idaho Disclosure of Breach of Security (Idaho Code § 28-51-104 - § 28-51-107)
Idaho Identity Theft (Idaho Code § 28-51-103 - § 28-51-107)
Idaho Resources / Links
Idaho Telephone Solicitation Act (Idaho Code § 48-1001 - § 48-1010)

Illinois

Illinois Anti-Phishing Act (740 ILCS § 7/1 - § 7/15)
Illinois Biometric Information Privacy Act (740 ILCS § 14/1 - § 14/99)
Illinois Data Disposal Law (815 ILCS § 530/30 - § 530/40)
Illinois Eavesdropping (720 Ill. Comp. Stat. 5/14-1, et. seq.)

Indiana

Indiana Consumer Data Protection Act (“ICDPA”) (Ind. Code § 24-15)
Indiana Data Disposal Law (Ind. Code §§ 24-4-14-8, Ind. Code § 24-4.9-3-3.5 - § 24-4.9-4-2)
Indiana Deceptive Commercial Electronic Mail (Ind. Code § 24-5-22 - § 24-5-22-10)
Indiana Disclosure of Security Breach (Ind. Code § 24-4.9-1 - § 24-4.9-5-1) (March 13, 2024)

Iowa

Iowa Computer Crime (Iowa Code § 716.6B, Iowa Code § 715.1 - § 715.8)
Iowa Consumer Data Protection Act (“ICDPA”)
Iowa Electronic Mail (Iowa Code § 716A.1 - § 716A.7)
Iowa Identity Theft (Iowa Code § 715A.8 - § 715A.9A, § 714.16B)

Kansas

Kansas Commercial Electronic Mail Act (K.S.A. § 50-6,107)
Kansas Data Disposal Law (K.S.A. § 50-6,139b)
Kansas Data Security Breach Notification (K.S.A. § 50-7a01, et seq.)
Kansas Identity Theft (K.S.A. § 50-6,139)

Kentucky

Kentucky Consumer Data Protection Act (“KCDPA”)
Kentucky Data Disposal (KRS § 365.720 - § 365.730)
Kentucky False Advertising (KRS § 517.030)
Kentucky Negative Option Plan (KRS § 367.570 - § 367-585)

Louisiana

Louisiana Anti-Phishing Act (La. Rev. Stat. § 51:2021 - § 51:2034)
Louisiana Computer Spyware (La. Rev. Stat. § 51:2006 - § 51:2014)
Louisiana Data Disposal (La. Rev. Stat. § 51:3074(B))
Louisiana Database Security Breach Notification Law (La. Rev. Stat. § 51:3071 - § 51:3077, La. Admin. Code tit. 16, pt. III, § 701)

Maine

Maine Electronic Mail Solicitation (MRS Title 10 § 1497)
Maine Notice of Risk to Personal Data (Data Breach) (Me. Rev. Stat. tit 10 § 1346, et seq.)
Maine Privacy of broadband Internet Access Service Customer Personal Information (MRS Title 35-A § 9301)
Maine Required Disclosures to Consumers (MRS Title 10 § 1210 - § 1210-B)

Maryland

Maryland Age Appropriate Design Code Act (MD. Commercial Law Code § 14-4801, et seq.)
Maryland Business Opportunity Sales Act (MD. Business Regulation Code Ann. § 14-101)
Maryland Commercial Electronic Mail (MD. Commercial Law Code Ann. § 14-3001 - § 14-3003)
Maryland Crimes Involving Telecommunications and Electronics (MD. Criminal Law Code Ann. § 7-301 - § 7-318)

Massachusetts

Massachusetts Consumer Protection Act (MGL c.93A § 1 - § 11)
Massachusetts Data Disposal (MGL c. 93I, § 2)
Massachusetts Resources / Links
Massachusetts Security Breaches (MGL c. 93H, § 1 - § 6)

Michigan

Michigan Children's Protection Registry Act (Mich. Comp. Laws § 752.1061 - § 752.1068)
Michigan Data Breach (Mich. Comp. Laws § 445.63, § 445.72, et seq.)
Michigan Data Disposal (Mich. Comp. Laws § 445.71a)
Michigan Facsimile Machines (Mich. Comp. Laws § 445.1771 – § 445.1776)

Minnesota

Minnesota Consumer Data Privacy Act (“MCDPA”) (Minn. Stat. § 325M.10, et al.)
Minnesota Disclosure of Data Security Breach (Minn. Stat. § 13.055, § 13.09, § 325E.61, § 325E.64)
Minnesota Facsimile Advertising (Minn. Stat. § 325E.395)
Minnesota False or Misleading Commercial Electronic Mail Messages (Minn. Stat. § 325F.694)

Mississippi

Mississippi An Act to Require Notice of a Breach of Security (Miss. Code Ann. § 75-24-29)
Mississippi Computer Crimes and Identity Theft (Miss. Code Ann. § 97-45-1 — § 97-45-33)
Mississippi False Advertising (Miss. Code Ann. § 97-23-1 - § 97-23-5)
Mississippi Fraud by Mail or Other Means of Communication (Miss. Code Ann. § 97-19-83)

Missouri

Missouri Electronic Mail Practices & Unsolicited Commercial Email (MO Rev Stat § 407.1120 - § 407.1141)
Missouri Notification of Breach of Security (Mo. Rev. Stat. § 407.1500)
Missouri Posting Certain Information over the Internet (MO Rev Stat § 565.240 - § 565.252)
Missouri Resources / Links

Montana

Montana Computer Security Breach (Mont. Code Ann. § 30-14-1701 - § 30-14-1704)
Montana Consumer Data Privacy Act (“MCDPA”) (Mont. Code Ann. § 30-14-2801, et seq.)
Montana Data Disposal (Mont. Code Ann. § 30-14-1703)
Montana Impediment of Identity Theft (Mont. Code Ann. § 30-14-1701, et seq.)

Nebraska

Nebraska Data Disposal (Neb. Rev. Stat. § 87-808(1))
Nebraska Data Privacy Act (“NDPA”) (NE Code § 87-1101, et seq.)
Nebraska False Advertising (Neb. Rev. Stat. § 28-1476 - § 28-1478)
Nebraska Financial Data Protection and Consumer Notification of Data Security Breach Act of 2006 (Neb. Rev. Stat. § 87-801 - § 87-808)

Nevada

Nevada Data Disposal (Nev. Rev. Stat. § 603A.200)
Nevada Liability of Persons Who Transmit Items of Electronic Mail that Include Advertisements (Nev. Rev. Stat. § 41.705 - § 41.735, Nev. Rev. Stat. § 205.492, § 205.511, § 205.513)
Nevada Resource Links
Nevada Security and Privacy of Personal Information (Data Breach) (Nev. Rev. Stat. § 603A.010, et seq.)

New Hampshire

New Hampshire Computer Crime (N.H. Rev. Stat. § 638:16 - § 638:19)
New Hampshire Computer Spyware (N.H. Rev. Stat. § 359-H:1 - § 359-H:6)
New Hampshire Expectation of Privacy (“NHEPA”) (N.H. Rev. Stat. § 507-H:1, et seq.)
New Hampshire Identity Fraud (N.H. Rev. Stat. § 638:25 - § 638:27)

New Jersey

New Jersey Data Disposal (NJ Rev Stat § 56:8-161 - § 56:8-162)
New Jersey Data Protection Act (“NJDPA”) (NJ Rev Stat § 56:8-166.4, et seq.)
New Jersey Facsimile Advertisements (NJ Rev Stat § 56:8-157 - § 56:8-160)
New Jersey Identity Theft Prevention Act (NJ Rev Stat § 56:11-44 - § 56:11-52, NJ Admin Code § 13:45F-1.1 - § 13:45F‐5.2)

New Mexico

New Mexico Computer Crimes Act (NM Stat § 30-45-1 - § 30-45-7)
New Mexico Data Breach Notification (NM Stat § 57-12C-1 - § 57-12C-12)
New Mexico Data Disposal (NM Stat § 57-12C-3)
New Mexico Fraudulent Telemarketing Act (NM Stat § 30-50-1 - § 30-50-4, NM Stat § 57-12-22)

New York

New York Anti-Phishing Act of 2006 (NY Gen. Bus. Law § 390-B)
New York Confidentiality of Social Security Account Number (NY Gen. Bus. Law § 399-DDD, § 399-DDD-2)
New York Data Disposal (NY Gen. Bus. Law § 399-H)
New York Domain Names Cyber Piracy Protections Act (NY Gen. Bus. Law § 146 - § 149)

North Carolina

North Carolina Computer Related Crimes (NC Gen. Stat. § 14-453, et seq.)
North Carolina Data Breach (NC Gen. Stat. § 75-61, § 75-65, NC Gen. Stat. § 14-113.20)
North Carolina Data Disposal (NC Gen. Stat. § 75-64)
North Carolina Identity Theft Protection Act (N.C. Gen. Stat. § 75-60 - § 75-66, NC Gen Stat § 14-113.20, et seq., NC Gen Stat § 1-539.2C)

North Dakota

North Dakota Commercial Electronic Mail Consumer Protection (N.D. Cent. Code § 51-27-01, et seq.)
North Dakota Data Processing Information Confidentiality (N.D. Cent. Code § 51-22-01, et seq.)
North Dakota Identity Fraud (N.D. Cent. Code § 51-31-01, et seq.)
North Dakota Notice of Security Breach for Personal Information (N.D. Cent. Code § 51-30-01, et seq.)

Ohio

Ohio Advertising by Facsimile Device (Ohio Rev. Code § 4931.10, § 4931.99)
Ohio Business Opportunity Plans (Ohio Rev. Code § 1334.01, et seq.)
Ohio Commercial Electronic Mail Messages (Ohio Rev. Code § 2913.421, § 2307.64)
Ohio Data Security Law - Safe Harbor Requirements (Ohio Rev. Code § 1354.01, et seq.)

Oklahoma

Oklahoma Anti-Phishing Act (15 OK Stat § 15-776.8 - § 15-776.20)
Oklahoma Commercial Solicitation by Facsimile Device (21 OK Stat § 21-1862, et seq.)
Oklahoma Commercial Telephone Solicitation Act (15 OK Stat § 15-775A.1 - § 15-775A.5)
Oklahoma Computer Crimes Act (21 OK Stat § 21-1951 - § 21-1959)

Oregon

Oregon Consumer Information Protection Act (OR Rev Stat § 646A.600 - § 646A.628)
Oregon Consumer Privacy Act ("OCPA") (ORS § 646A.570 - 646A.589)
Oregon Data Disposal (OR Rev Stat § 646A.622)
Oregon Identity Theft (OR Rev Stat § 165.800, § 165.803)

Pennsylvania

Pennsylvania Breach of Personal Information Notification Act (73 P.S. § 2301 – § 2329)
Pennsylvania Consumer Protection Against Computer Spyware Act (73 P.S. § 2330.1 - § 2330.20)
Pennsylvania Identity Theft (18 Pa.C.S.A. § 4120)
Pennsylvania Resources / Links

Rhode Island

Rhode Island Computer Crime (R.I. Gen. Laws § 11-52-1, et seq.)
Rhode Island Consumer Empowerment and Identity Theft Prevention Act of 2006 (R.I. Gen. Laws § 6-48-8)
Rhode Island Data Disposal (R.I. Gen. Laws § 6-52-1, et seq.)
Rhode Island Data Transparency and Privacy Protection Act (“DTPPA”) (R.I. Gen. Laws § 6-48.1-1, et seq.)

South Carolina

South Carolina Breach of Security of Business Data (SC Code § 39-1-90)
South Carolina Business Opportunity Sales Act (SC Code § 39-57-10)
South Carolina Consumer Identity Theft Protection (SC Code § 37-20-110, et seq.)
South Carolina Data Disposal (SC Code § 37-20-190)

South Dakota

South Dakota Business Opportunities (SD Codified L § 37-25A-1, et seq.)
South Dakota Computer Crime (SD Codified L § 43-43B-1, et seq.)
South Dakota Identity Theft (SD Codified L § 22-40-8)
South Dakota Notice of Breach (SD Codified Laws § 22-40-19 - § 22-40-26)

Tennessee

Tennessee Anti-Phishing Act of 2006 (Tenn. Code Ann. § 47-18-5201, et seq.)
Tennessee Consumer Telemarketing Protection (Tenn. Code Ann. § 47-18-1501, et seq.)
Tennessee Data Disposal (Tenn. Code Ann. § 39-14-150(g))
Tennessee Disclosure of Data Security Breach (Tenn. Code Ann. § 47-18-2107)

Texas

Texas Anti-Phishing Act (Tex. Bus. & Com. Code § 325.001, et seq.)
Texas Biometric Identifiers (TX Bus & Com Code § 503.001)
Texas Computer Crimes (TX Penal Code § 33.01, et seq.)
Texas Data Breach Notification (Tex. Bus. & Com. Code § 521.002, § 521.053, § 521.151, § 521.152)

Utah

Utah Automatic Renewal Contracts Act (Utah Code § 13-70-101, et seq.)
Utah Business Guide to Online Trial Offers, Product Memberships, and Negative Options
Utah Business Opportunity Disclosure Act (UT Code § 13-15-101, et seq.)
Utah Consumer Privacy Act (Effective 12/31/2023) (Utah Code § 13-61-101, et seq.)

Vermont

Vermont Computer Crimes (13 V.S.A. § 4101, et seq.)
Vermont Data Brokers (9 V.S.A. § 2446, et seq.)
Vermont Data Disposal (9 V.S.A. § 2445)
Vermont Electronic Communication Privacy Act (13 V.S.A. § 8101, et seq.)

Virginia

Automatic Renewal Offers and Continuous Service Offers (VA Code § 59.1-207.45, et seq.)
Electronic Identity Management Act (VA Code § 59.1-550, et seq.)
Virginia Breach of Personal Information Notification (Va. Code § 18.2-186.6, et seq.)
Virginia Business Opportunity Sales Act (VA Code § 59.1-262, et seq.)

Washington

Washington Biometric Identifiers (WA Rev Code § 19.375.010, et seq.)
Washington Business Opportunity Fraud Act (WA Rev Code § 19.110.010, et seq.)
Washington Commercial Electronic Mail (WA Rev Code § 19.190.010, et seq.)
Washington Data Disposal (WA Rev Code § 19.215.005 - § 19.215.030)

West Virginia

West Virginia Breach of Security of Consumer Information (WV Code § 46A-2A-101, et seq.)
West Virginia Computer Crime and Abuse Act (WV Code § 61-3C-1 - § 61-3C-21)
West Virginia Electronic Mail Protection Act (WV Code § 46A-6G-1 - § 46A-6G-5)
West Virginia Resource Links

Wisconsin

Wisconsin Computer Crimes (WI Stat § 943.70)
Wisconsin Data Disposal (WI Stat § 134.97)
Wisconsin Notice of Unauthorized Acquisition of Personal Information (Data Breach) (WI Stat § 134.98)
Wisconsin Prohibition of Certain Unsolicited Messages by Facsimile Machine (WI Stat § 134.72)

Wyoming

Wyoming Commercial Electronic Mail (WY Stat § 40-12-401, et seq.)
Wyoming Computer Crimes (WY Stat § 6-3-501, et seq.)
Wyoming Identity Theft (WY Stat § 6-3-901, et seq.)
Wyoming Resources / Links

U.S. Territory - Guam

Guam Notification of Breaches of Personal Information (9 G.C.A. § 48.10, et seq.)
Guam Regulation of Telemarketing (5 G.C.A. § 32301, et seq.)
Guam Social Security Number Confidentiality Act (5 G.C.A. § 32701, et seq.)

U.S. Territory - Puerto Rico

Puerto Rico Data Breach Notification (10 P.R. Laws Ann. §§ 4051, et seq.)
Puerto Rico Telemarketing Fraud Prevention Act (P.R. Laws tit. 10, § 4031, et seq.)

U.S. Territory - U.S. Virgin Islands

Virgin Islands Computer Crimes and Technology Act of 2013 (14 V.I.C. § 459, et seq.)
Virgin Islands Notices of Security Breach (14 V.I.C. § 2201, § 2208, § 2209 - § 2212)
Virgin Islands Telemarketing (12A V.I.C. § 303, § 310, § 327 - § 336)
Virgin Islands The Identity Theft Prevention Act (14 V.I.C. § 2220, et seq.)

Return To Legal Compliance Guides & Checklists