
California Data Breach Notification Laws: Reporting Rules & Timelines (2026)
California requires breach notification within 30 days under SB 446. Learn who must comply, what triggers notice, CCPA damages, and AG reporting rules.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
11269 articles
Browse by Category →
California requires breach notification within 30 days under SB 446. Learn who must comply, what triggers notice, CCPA damages, and AG reporting rules.

Pennsylvania requires breach notification without unreasonable delay. The 2024 BPINA amendment adds AG notice at 500+, 12-month credit monitoring, and health insurance data coverage.

Louisiana has no standalone biometric privacy law but protects biometric data through breach notification rules. Learn the 60-day notice requirements and penalties.

Rhode Island requires data breach notification within 45 days (30 for government). Learn about the 128-bit encryption safe harbor, AG reporting at 500+, and per-record penalties.

Rhode Island biometric privacy laws under the RIDTPPA require opt-in consent for fingerprint and biometric data collection, with AG-enforced penalties up to $10,000 per violation.

Nebraska biometric privacy laws require opt-in consent under the NDPA. Learn about definitions, penalties up to $7,500 per violation, exemptions, and breach notification rules.

Pennsylvania lacks a standalone biometric privacy law. Learn how BPINA, the UTPCPL, and pending bills like HB 78 and HB 596 affect biometric data rights.

Vermont requires data breach notification within 45 days plus a 14-day preliminary AG notice. Learn who must comply, protected data types, penalties, and reporting rules.

Michigan protects biometric data through its Identity Theft Protection Act and Consumer Protection Act. Learn current rules, breach penalties, and pending 2026 legislation.

South Dakota requires data breach notification within 60 days. Learn about the AG reporting threshold of 250 residents, $10,000/day penalties, and protected information coverage.

Iowa requires breach notification in the most expedient time possible under Code 715C. Learn about biometric data coverage, AG reporting rules, and penalties.

Learn Florida's 30-day data breach notification deadline, penalty structure up to $500,000, AG reporting rules, and encryption safe harbor under Fla. Stat. 501.171.