We thought it might be helpful to provide citations to the 37 state (plus D.C. and Puerto Rico) breach notification laws that cover private entities (Oklahoma’s law, that only addresses state agencies, is not included). We also provide links, or uploaded copies, where available.
Arizona (ARIZ. REV. STAT. ANN. § 44-7501(h)
Arkansas (ARK. CODE ANN. § 4-110-101 et seq.)
California (CAL. CIV. CODE § 1798.82)
Colorado (COLO. REV. STAT. § 6-1-716)
Connecticut (CONN. GEN. STAT. § 36a-701b)
Delaware (DEL. CODE ANN. tit. 6, § 12B-101)
District of Columbia (District of Columbia B16-810, D.C. Code § 28-3851)
Florida (FLA. STAT. § 817.5681)
Georgia (GA. CODE ANN. § 10-1-911)
Idaho (IDAHO CODE ANN. § 28-51-104 et seq.)
Illinois (815 ILL. COMP. STAT. ANN. 530/5, /10)
Indiana (IND. CODE § 4-1-11 et seq.)
Kansas (KAN. STAT. ANN. §§ 50-7a01-02)
Louisiana (LA. REV. STAT. ANN. § 51:3071 et seq.)
Maine (ME. REV. STAT. ANN. tit. 10, §210-B-1346 et seq.)
Maryland (H.B. 208 and S.B. 194)
Minnesota (MINN. STAT. § 325E.61)
Montana (MONT. CODE ANN. § 30-14-1704)
Nebraska (NEB. REV. STAT. § 87-801 et seq.)
Nevada (NEV. REV. STAT. 603A.010 et seq.)
New Hampshire (N.H. REV. STAT. ANN. § 359-C:19 et seq.)
New Jersey (N.J. STAT. ANN. § 56:8-163)
New York (N.Y. GEN. BUS. LAW § 899-aa)
North Carolina (N.C. GEN. STAT.§ 75-60 et seq.)
North Dakota (N.D. CENT. CODE § 51-30-01 et seq.)
Ohio (OHIO REV. CODE ANN. § 1349.19)
Oregon (S.B. 583)
Pennsylvania (73 PA. CONS. STAT. ANN. § 2303)
Puerto Rico (Law 111 and Regulation 7207)
Rhode Island (R.I. GEN. LAWS § 11-49.2-3))
Tennessee (TENN. CODE ANN. § 47-18-21)
Texas (TEX. BUS. & COMM. CODE ANN. § 48.001 et seq.)
Utah (UTAH CODE ANN. § 13-42-101 et seq.)
Vermont (VT. STAT. ANN. tit. 9, § 2430 et seq.)
Washington (WASH. REV. CODE § 19.255.010)
Wisconsin (WIS. STAT. § 895.507)
Wyoming (W.S. 40-12-501 through 40-12-509)
For a helpful compilation of state laws addressing credit freezes and Social Security numbers, and proposal federal legislation addressing identity theft, see Congressional Research Service Report for Congress, Identity Theft Laws: State Penalties and Remedies and Pending Federal Bills, June 1, 2007.