
Illinois Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Learn Illinois data breach notification rules under 815 ILCS 530, including reporting timelines, AG notification thresholds, encryption safe harbor, and penalties.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
11269 articles
Browse by Category →
Learn Illinois data breach notification rules under 815 ILCS 530, including reporting timelines, AG notification thresholds, encryption safe harbor, and penalties.

Indiana's ICDPA classifies biometric data as sensitive, requiring opt-in consent for fingerprints, voiceprints, and iris scans. Learn consent rules, penalties, and exemptions.

Learn Alabama's data breach notification rules under the 2018 Act, including the 45-day deadline, AG reporting requirements, penalties, and exemptions.

Learn Kentucky data breach notification requirements under KRS 365.732 and government rules under KRS 61.931-934, including timing, encryption safe harbor, and penalties.

Nevada lacks a standalone biometric privacy law but protects health-related biometric data under NRS 603A. Learn about consent rules, sale bans, and enforcement.

Montana MCDPA classifies biometric data as sensitive, requiring opt-in consent. AG-only enforcement with penalties up to $7,500 per violation. No private right of action.

Massachusetts has no standalone biometric privacy law, but 201 CMR 17.00, Chapter 93A treble damages, and the pending Data Privacy Act (S.2608) protect biometric data.

Colorado requires data breach notification within 30 days. Learn who must comply, what personal information is protected, AG reporting rules, and penalties.

Virginia requires data breach notification to the Attorney General and affected residents without unreasonable delay. Learn about the $150,000 penalty cap and private right of action for direct economic damages.

Learn how Kentucky's KCDPA classifies biometric data as sensitive, requiring opt-in consent. Covers definitions, consumer rights, exemptions, and AG enforcement.

South Carolina has no standalone biometric privacy law. Learn about breach notification under SC Code 39-1-90, the Insurance Data Security Act, and pending legislation.

Idaho has no dedicated biometric privacy law as of 2026. Learn what current statutes cover, pending legislation like H0744, and how Idaho compares to other states.