Loading...
433 articles · page 5 of 8
Missouri has no comprehensive consumer privacy law but enforces data breach notification under Mo. Rev. Stat. 407.1500. Learn about breach notification, identity theft protections, and consumer rights.
Maryland MODPA compliance: strict-necessity data minimization (Com. Law 14-4607), sensitive-data sale ban, UOOM, assessments, and penalties to $10,000.
Maryland's MODPA (Com. Law 14-4605) grants access, deletion, opt-out, and a 45-day response, plus the strictest sensitive-data and minimization protections in the US.
Montana MCDPA classifies biometric data as sensitive, requiring opt-in consent. AG-only enforcement with penalties up to $7,500 per violation. No private right of action.
Montana requires data breach notification without unreasonable delay under Mont. Code 30-14-1704. Learn who must be notified, protected data types, AG reporting rules, and penalties.
Montana Consumer Data Privacy Act (MCDPA) explained. Learn your rights to access, delete, and opt out of data sales under Mont. Code Ann. 30-14-2801, plus breach notification rules.
Morocco data protection under Law 09-08: CNDP registration rules, constitutional basis, legal bases, data subject rights, cross-border transfers, penalties, and 2025-2026 developments.
Deadline is August 7, 2026 for the Motility Software data breach settlement: ~$75 no-proof cash or up to $5,000 with proof, plus 2 years free monitoring.
The $3.3M Mt. Baker Imaging & Northwest Radiologists data breach settlement is open. Claim deadline: August 19, 2026. See who is eligible and how to file.
No National Public Data breach settlement or claim form exists as of July 2026. The company's bankruptcy was dismissed. Here is what actually helps.
Nebraska NDPA compliance (Neb. Rev. Stat. 87-1103): the SBA small-business test, opt-in sensitive data, assessments, plus a permanent 30-day cure period.
Nebraska's NDPA (Neb. Rev. Stat. 87-1107) gives five rights: access, correct, delete, port, and opt out, with a 45-day response window and a 60-day appeal.
Nebraska biometric privacy laws require opt-in consent under the NDPA. Learn about definitions, penalties up to $7,500 per violation, exemptions, and breach notification rules.
Nebraska requires data breach notification without unreasonable delay under Neb. Rev. Stat. 87-801. Learn about broad PI coverage including biometrics, AG notification, and the cybersecurity safe harbor.
Nebraska Data Privacy Act (LB 1074) took effect January 1, 2025. Learn consumer rights, business obligations, penalties up to $7,500, and data breach notification rules.
Complete guide to Netherlands data privacy laws: GDPR, UAVG, Autoriteit Persoonsgegevens enforcement, Clearview AI EUR 30.5M fine, EU AI Act, breach rules, DPO requirements, and 2024-2026 developments.
Nevada lacks a standalone biometric privacy law but protects health-related biometric data under NRS 603A. Learn about consent rules, sale bans, and enforcement.
Nevada's consumer health data law (SB 370, NRS ch. 603A) took effect March 31, 2024, bans geofencing within 1,750 feet of clinics, and has no private right of action.
Nevada requires data breach notification without unreasonable delay under NRS 603A. Learn about protected data types, PCI DSS mandate, no AG notification requirement, and the encryption safe harbor.
Complete guide to Nevada data privacy laws including SB 220 opt-out rights, NRS 603A breach notification rules, consumer health data protections, and enforcement penalties.
New Hampshire classifies biometric data as sensitive under RSA 507-H (effective Jan 2025). Learn about consent rules, penalties up to $10,000, and the Data Privacy Unit.
New Hampshire requires data breach notification as quickly as possible under RSA 359-C:20. Learn about AG pre-notification, the $5,000 substitute notice threshold, CRA reporting, and penalties.
Learn about New Hampshire data privacy laws including the NH Privacy Act (RSA 507-H), consumer rights, business obligations, penalties up to $10,000 per violation, and breach notification rules.
New Jersey biometric privacy law under the NJDPA requires consent before collecting fingerprints, facial geometry, or voiceprints. Learn the rules, penalties, and your rights.
New Jersey requires data breach notification within 30 days, with a unique 7-day rule for social media breaches. Learn about treble damages, AG and State Police reporting, and penalties up to $20K.
Learn about New Jersey data privacy laws including the NJDPA, consumer rights, sensitive data protections, breach notification rules, and AG enforcement penalties.
NJ Gov. Sherrill signed A5328 on June 30, 2026, banning sensitive-data sales and creating a data-broker registry with fees up to $1.5 million and $50,000 per-record penalties.
New Mexico protects biometric data through its Data Breach Notification Act, requiring 45-day notification and AG reporting. No standalone biometric privacy law exists.
New Mexico requires data breach notification within 45 days of discovery under N.M. Stat. 57-12C. Learn about biometric data coverage, AG reporting, HIPAA/GLBA exemptions, and enforcement.
New Mexico's Data Breach Notification Act (NMSA 57-12C) requires 45-day notice. In March 2026, a jury ordered Meta to pay $375M under the Unfair Practices Act.
Guide to New York biometric privacy laws including the SHIELD Act, NYC Local Law 3, pending Biometric Privacy Act (S1422), and employer obligations for 2026.
New York requires data breach notification within 30 days under the SHIELD Act. Learn who must be notified, safeguard requirements, and penalties up to $250K.
Guide to New York data privacy laws including the SHIELD Act, breach notification rules, biometric protections, employee monitoring law, and pending NY Privacy Act.
New Zealand Privacy Act 2020: 13 IPPs, IPP 3A indirect-collection rule (May 2026), Biometric Code 2025, breach notification, IPP 12 cross-border transfer, and enforcement powers.
NHDPA (RSA 507-H) compliance: 35,000-consumer test, privacy notice, opt-in sensitive data, universal opt-out, assessments. Cure period sunset Dec 31, 2025.
Under RSA 507-H:4, NH residents can access, correct, delete, and port data and opt out of sales and ads. Controllers must respond within 45 days; appeals in 60.
Complete guide to Nigeria data privacy laws: the NDPA 2023, GAID 2025, NDPC enforcement, DCPMI registration, data subject rights, breach notification, penalties up to 2% annual revenue.
NJDPA compliance steps (N.J.S.A. 56:8-166.4 et seq.): applicability, notice, sensitive-data consent, GPC, assessments; 30-day cure sunsets ~July 2026.
NJDPA rights (N.J.S.A. 56:8-166.4 et seq.): access, correct, delete, port, and opt out, with a 45-day response, GPC opt-out, and appeals to Consumer Affairs.
North Carolina protects biometric data through breach notification laws with treble damages. Learn about NC fingerprint laws, employer rules, and pending privacy legislation.
North Carolina requires breach notification without unreasonable delay. Violations are UDTP offenses with treble damages and a private right of action under N.C. Gen. Stat. 75-65.
Learn about North Carolina data privacy laws including the Identity Theft Protection Act, breach notification requirements, SSN protections, and proposed legislation.
North Dakota has no standalone biometric privacy law. Learn how the state's identity theft statute, breach notification law, and insurance regulations address biometric data.
North Dakota requires breach notification without unreasonable delay and AG notice at 250+ affected individuals. Penalties up to $5,000 per violation under N.D. Cent. Code 51-30.
North Dakota data privacy laws: breach notification under N.D. Cent. Code Ch. 51-30, HB 1127 financial data security, identity theft protections, and federal TAKE IT DOWN Act coverage as of May 2026.
Norway applies the full GDPR through the EEA Agreement. The Personal Data Act 2018 supplements it with national rules. Datatilsynet enforces with fines up to EUR 20 million. Updated 2026.
Comply with Oregon's OCPA (ORS 646A.570 to 646A.589): applicability, privacy notice, sensitive-data opt-in, universal opt-out by Jan 1 2026, $7,500 penalties.
Oregon's OCPA (ORS 646A.574) gives access, deletion, opt-out, and a rare specific-third-party-list right. Controllers must respond within 45 days; appeals allowed.
Ohio has no biometric privacy law. Learn how the Ohio Data Protection Act safe harbor, breach notification rules, and insurance regulations affect biometric data.
Ohio requires data breach notification within 45 days. Escalating penalties reach $10,000/day. The Ohio Data Protection Act offers a cybersecurity safe harbor under ORC 1349.19.
Guide to Ohio data privacy laws including the Data Protection Act safe harbor, breach notification requirements under ORC 1349.19, and consumer protections.
Oklahoma protects biometric data through its amended breach notification law (SB 626) and the Consumer Data Privacy Act (SB 546). No standalone biometric law exists.
Oklahoma requires breach notification without unreasonable delay. SB 626 (effective Jan 2026) adds biometric data, 60-day AG deadline, and $150K penalty cap.
Oklahoma enacted the Consumer Data Privacy Act (SB 546) on March 20, 2026, effective Jan. 1, 2027. Learn breach notification rules, AG enforcement, and federal overlay.
The Onsite Mammography data breach settlement is open. Claim deadline: August 11, 2026. Who may be eligible and what people can realistically get.
Oppenheimer's $70M cash sweep settlement has preliminary approval only. Claim deadline is Sept. 17, 2026. See who may be eligible and how to file.
Oregon biometric privacy laws under the OCPA require opt-in consent for biometric data. Portland bans facial recognition in public spaces with $1,000/day penalties.
Oregon requires data breach notification within 45 days. AG notice at 250+, CRA at 1,000+. Penalties up to $500,000 for continuing violations under ORS 646A.604.
Learn about Oregon data privacy laws including the OCPA, consumer rights, business obligations, $7,500 penalties, and breach notification rules.
Pakistan has no enacted data protection law as of 2026. PECA 2016 (amended January 2025) and sector rules apply. Full guide to the pending Personal Data Protection Bill.