Update, 7/23/09: Missouri passed a breach notification law on July 9, 2009.
Alaska has enacted a data breach notification law, making it the forty-fourth state (along with D.C. and Puerto Rico) to do so. Now that only six states remain, maybe instead of listing all the states with breach notification laws, we should just name the ones who for some reason haven’t done so:
- Alabama
- Kentucky
- Mississippi
- Missouri
- New Mexico
- South Dakota
States without data breach notification laws
Alabama and Missouri have at least considered breach notification bills. Alabama’s bill would also have incorporated PCI DSS requirements.
