Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
11269 articles
Browse by Category →
Louisiana requires data breach notification within 60 days. Learn who must report, what data is protected, AG reporting rules, and penalties under La. R.S. 51:3071.
Michigan data breach notification law requires businesses to notify residents of security breaches involving personal information. Learn timelines, penalties, and safe harbors under MCL 445.72.
Arkansas protects biometric data under its breach notification law, not a dedicated statute. Learn what the Personal Information Protection Act requires in 2026.
Oregon requires data breach notification within 45 days. AG notice at 250+, CRA at 1,000+. Penalties up to $500,000 for continuing violations under ORS 646A.604.
Utah requires data breach notification without unreasonable delay. Learn about the 2024 AG/Cyber Center reporting requirement at 500+, $2,500 per-consumer penalties, and investigation obligation.
North Carolina protects biometric data through breach notification laws with treble damages. Learn about NC fingerprint laws, employer rules, and pending privacy legislation.
Vermont's comprehensive biometric privacy bill H.121 was vetoed in 2024. Learn about current protections under breach notification and data broker laws.
Iowa classifies biometric data as sensitive under the ICDPA (effective Jan 2025). Learn about opt-out requirements, breach notification rules, and penalties.
Learn Arkansas data breach notification rules under the Personal Information Protection Act, including reporting timelines, AG requirements, and penalties.
Kansas requires businesses to investigate breaches and notify residents without unreasonable delay under K.S.A. 50-7a01. Learn about PI definitions, safe harbors, and penalties.
Indiana requires data breach notification within 45 days. Learn who must be notified, what personal information triggers the law, penalties up to $150,000, and the biometric data gap.
Learn how Minnesota's MCDPA classifies biometric data as sensitive, requiring opt-in consent. Covers definitions, consumer rights, exemptions, and AG enforcement with $7,500 penalties.