State requirements

Security requirements by state

Each state adds its own data-security expectations, breach-notification law and licensing conditions to the federal minimum. Choose a state to see what regulated firms there are expected to have in place, with the statute named for each rule.

All fifty states

AL

Alabama

The federal minimum, what Alabama law says about protecting data, and what a license adds, with sources cited.

See Alabama requirements
AK

Alaska

The federal minimum, what Alaska law says about protecting data, and what a license adds, with sources cited.

See Alaska requirements
AZ

Arizona

The federal minimum, what Arizona law says about protecting data, and what a license adds, with sources cited.

See Arizona requirements
AR

Arkansas

The federal minimum, what Arkansas law says about protecting data, and what a license adds, with sources cited.

See Arkansas requirements
CA

California

The federal minimum, what California law says about protecting data, and what a license adds, with sources cited.

See California requirements
CO

Colorado

The federal minimum, what Colorado law says about protecting data, and what a license adds, with sources cited.

See Colorado requirements
CT

Connecticut

The federal minimum, what Connecticut law says about protecting data, and what a license adds, with sources cited.

See Connecticut requirements
DE

Delaware

The federal minimum, what Delaware law says about protecting data, and what a license adds, with sources cited.

See Delaware requirements
FL

Florida

The federal minimum, what Florida law says about protecting data, and what a license adds, with sources cited.

See Florida requirements
GA

Georgia

The federal minimum, what Georgia law says about protecting data, and what a license adds, with sources cited.

See Georgia requirements
HI

Hawaii

The federal minimum, what Hawaii law says about protecting data, and what a license adds, with sources cited.

See Hawaii requirements
ID

Idaho

The federal minimum, what Idaho law says about protecting data, and what a license adds, with sources cited.

See Idaho requirements
IL

Illinois

The federal minimum, what Illinois law says about protecting data, and what a license adds, with sources cited.

See Illinois requirements
IN

Indiana

The federal minimum, what Indiana law says about protecting data, and what a license adds, with sources cited.

See Indiana requirements
IA

Iowa

The federal minimum, what Iowa law says about protecting data, and what a license adds, with sources cited.

See Iowa requirements
KS

Kansas

The federal minimum, what Kansas law says about protecting data, and what a license adds, with sources cited.

See Kansas requirements
KY

Kentucky

The federal minimum, what Kentucky law says about protecting data, and what a license adds, with sources cited.

See Kentucky requirements
LA

Louisiana

The federal minimum, what Louisiana law says about protecting data, and what a license adds, with sources cited.

See Louisiana requirements
ME

Maine

The federal minimum, what Maine law says about protecting data, and what a license adds, with sources cited.

See Maine requirements
MD

Maryland

The federal minimum, what Maryland law says about protecting data, and what a license adds, with sources cited.

See Maryland requirements
MA

Massachusetts

The federal minimum, what Massachusetts law says about protecting data, and what a license adds, with sources cited.

See Massachusetts requirements
MI

Michigan

The federal minimum, what Michigan law says about protecting data, and what a license adds, with sources cited.

See Michigan requirements
MN

Minnesota

The federal minimum, what Minnesota law says about protecting data, and what a license adds, with sources cited.

See Minnesota requirements
MS

Mississippi

The federal minimum, what Mississippi law says about protecting data, and what a license adds, with sources cited.

See Mississippi requirements
MO

Missouri

The federal minimum, what Missouri law says about protecting data, and what a license adds, with sources cited.

See Missouri requirements
MT

Montana

The federal minimum, what Montana law says about protecting data, and what a license adds, with sources cited.

See Montana requirements
NE

Nebraska

The federal minimum, what Nebraska law says about protecting data, and what a license adds, with sources cited.

See Nebraska requirements
NV

Nevada

The federal minimum, what Nevada law says about protecting data, and what a license adds, with sources cited.

See Nevada requirements
NH

New Hampshire

The federal minimum, what New Hampshire law says about protecting data, and what a license adds, with sources cited.

See New Hampshire requirements
NJ

New Jersey

The federal minimum, what New Jersey law says about protecting data, and what a license adds, with sources cited.

See New Jersey requirements
NM

New Mexico

The federal minimum, what New Mexico law says about protecting data, and what a license adds, with sources cited.

See New Mexico requirements
NY

New York

The federal minimum, what New York law says about protecting data, and what a license adds, with sources cited.

See New York requirements
NC

North Carolina

The federal minimum, what North Carolina law says about protecting data, and what a license adds, with sources cited.

See North Carolina requirements
ND

North Dakota

The federal minimum, what North Dakota law says about protecting data, and what a license adds, with sources cited.

See North Dakota requirements
OH

Ohio

The federal minimum, what Ohio law says about protecting data, and what a license adds, with sources cited.

See Ohio requirements
OK

Oklahoma

The federal minimum, what Oklahoma law says about protecting data, and what a license adds, with sources cited.

See Oklahoma requirements
OR

Oregon

The federal minimum, what Oregon law says about protecting data, and what a license adds, with sources cited.

See Oregon requirements
PA

Pennsylvania

The federal minimum, what Pennsylvania law says about protecting data, and what a license adds, with sources cited.

See Pennsylvania requirements
RI

Rhode Island

The federal minimum, what Rhode Island law says about protecting data, and what a license adds, with sources cited.

See Rhode Island requirements
SC

South Carolina

The federal minimum, what South Carolina law says about protecting data, and what a license adds, with sources cited.

See South Carolina requirements
SD

South Dakota

The federal minimum, what South Dakota law says about protecting data, and what a license adds, with sources cited.

See South Dakota requirements
TN

Tennessee

The federal minimum, what Tennessee law says about protecting data, and what a license adds, with sources cited.

See Tennessee requirements
TX

Texas

The federal minimum, what Texas law says about protecting data, and what a license adds, with sources cited.

See Texas requirements
UT

Utah

The federal minimum, what Utah law says about protecting data, and what a license adds, with sources cited.

See Utah requirements
VT

Vermont

The federal minimum, what Vermont law says about protecting data, and what a license adds, with sources cited.

See Vermont requirements
VA

Virginia

The federal minimum, what Virginia law says about protecting data, and what a license adds, with sources cited.

See Virginia requirements
WA

Washington

The federal minimum, what Washington law says about protecting data, and what a license adds, with sources cited.

See Washington requirements
WV

West Virginia

The federal minimum, what West Virginia law says about protecting data, and what a license adds, with sources cited.

See West Virginia requirements
WI

Wisconsin

The federal minimum, what Wisconsin law says about protecting data, and what a license adds, with sources cited.

See Wisconsin requirements
WY

Wyoming

The federal minimum, what Wyoming law says about protecting data, and what a license adds, with sources cited.

See Wyoming requirements

Licensed in more than one state? The assessment covers each state where you operate. These pages are a starting point and offer general information, not legal advice.

Licensed in several states?

One assessment covers each state where you operate

Each finding names the rule behind it.