What do breach and data security rules ask a firm to do?
Breach laws say who must be told after personal information is taken, and how fast; professional rules ask a firm to protect client information beforehand.
Last read from the sources at the foot of this page.
What does each US state's data breach law ask a business to do?
Every US state, the District of Columbia and Puerto Rico has a law that says when a business must tell people their personal information was taken. The pages below read them from each state's own statute: who it applies to, what counts as personal information, how fast, and who else must be told.
- Data breach laws, by US state
- Alabama data breach notification law
- Alaska data breach notification law
- Arizona data breach notification law
- California data breach notification law
- Colorado data breach notification law
- Connecticut data breach notification law
- Delaware data breach notification law
- District of Columbia data breach notification law
- Florida data breach notification law
- Hawaii data breach notification law
- Idaho data breach notification law
- Illinois data breach notification law
- Indiana data breach notification law
- Kansas data breach notification law
- Kentucky data breach notification law
- Louisiana data breach notification law
- Maine data breach notification law
- Maryland data breach notification law
- Massachusetts data breach notification law
- Michigan data breach notification law
- Minnesota data breach notification law
- Mississippi data breach notification law
- Missouri data breach notification law
- Montana data breach notification law
- Nebraska data breach notification law
- New Hampshire data breach notification law
- New Jersey data breach notification law
- New Mexico data breach notification law
- New York data breach notification law
- North Carolina data breach notification law
- North Dakota data breach notification law
- Ohio data breach notification law
- Oklahoma data breach notification law
- Oregon data breach notification law
- Pennsylvania data breach notification law
- Rhode Island data breach notification law
- South Carolina data breach notification law
- South Dakota data breach notification law
- Tennessee data breach notification law
- Texas data breach notification law
- Utah data breach notification law
- Vermont data breach notification law
- Virginia data breach notification law
- Washington data breach notification law
- West Virginia data breach notification law
- Wisconsin data breach notification law
- Wyoming data breach notification law
What do Canada's privacy laws ask a business to do after a breach?
Federal law (PIPEDA) and some provinces say when an organization must report a breach and to whom. The pages below read each Act from its official text, quoted with the date we read it.
- Canadian privacy and health information acts
- Alberta Health Information Act breach notice
- Alberta PIPA breach notification
- BC PIPA and breach reporting
- PIPEDA breach records
- PIPEDA breach reporting
- Manitoba PHIA breach notification
- New Brunswick PHIPAA breach notification
- Newfoundland and Labrador PHIA breach notice
- Nova Scotia PHIA breach notification
- Ontario PHIPA breach notification
What do professional rules ask a firm to do about client data security?
Lawyers, tax preparers and financial firms answer to rules of their own about protecting client information. The pages below read each rule or guidance from the body that publishes it.
- Professional rules for law, tax and finance
- ABA Formal Opinion 477R: securing client communications
- ABA Model Rule 1.6(c): safeguarding client information
- Law Society of British Columbia: technology and records
- Law Society of Ontario: technology competence
- FTC Safeguards Rule, 16 CFR Part 314
- IRS Publication 4557: safeguarding taxpayer data
Is this legal advice?
No. This summarises the public text; it is not legal advice.
Where does this come from?
- Code of Alabama, Section 8-38-2alison.legislature.state.al.usRead 15 October 2026
- Alaska Statutes, Title 45, Chapter 48, Article 1 (Breach of Security Involving Personal Information)akleg.govRead 15 October 2026
- Arizona Revised Statutes 18-552 (Notification of security system breaches)azleg.govRead 15 October 2026
See what is open before anyone else does.
We read your domain from outside and show each way in with a check anyone can re-run.