State Breach Notification Laws

At least 39 states have enacted legislation requiring notification of security breaches involving personal information.

Arizona Ariz. Rev. Stat. § 44-7501 (2007 S.B. 1042, Chapter 23)
Arkansas Ark. Code § 4-110-101 et seq.
California Cal. Civ. Code  § 1798.82
Colorado Colo. Rev.  Stat. § 6-1-716
Connecticut Conn. Gen Stat.  36a-701(b)
Delaware Del. Code  tit. 6, §  12B-101 et seq.
Florida Fla. Stat. § 817.5681
Georgia Ga. Code §§ 10-1-910,  -911
Hawaii Haw. Rev.  Stat. § 487N-2
Idaho Idaho Code §§ 28-51-104 to  28-51-107
Illinois 815 ILCS 530/1  et seq.
Indiana Ind. Code  §§ 24-4.9 et  seq., 4-1-11  et seq.
Kansas Kan. Stat. 50-7a01,  50-7a02
Louisiana La. Rev.  Stat. § 51:3071 et  seq.
Maine Me. Rev.  Stat. tit. 10 §§ 1347  et seq.
Maryland Md. Code,  Com. Law § 14-3501 et  seq.
Massachusetts 2007 H.B.  4144, Chapter  82
Michigan Mich. Comp. Laws  § 445.61 et  seq.
Minnesota Minn. Stat. §§  325E.61,  325E.64
Montana Mont. Code § 30-14-1701  et seq.
Nebraska Neb. Rev.  Stat. §§ 87-801, -802, -803, -804, -805, -806-807
Nevada Nev. Rev.  Stat. 603A.010 et  seq.
New Hampshire N.H. Rev.  Stat. §§ 359-C:19  et seq.
New Jersey N.J. Stat.  56:8-163
New York N.Y. Gen.  Bus. Law § 899-aa
North Carolina N.C. Gen.  Stat § 75-65
North Dakota N.D. Cent.  Code § 51-30-01 et  seq.
Ohio Ohio Rev. Code §§ 1347.12, 1349.19, 1349.191, 1349.192
Oklahoma Okla. Stat. § 74-3113.1
Oregon 2007 S.B.  583, Chapter  759
Pennsylvania 73 Pa. Stat. § 2303 (link not available)(2005 S.B. 712, Act 94)
Rhode Island R.I. Gen.  Laws § 11-49.2-1  et seq.
Tennessee Tenn. Code § 47-18-2107
Texas Tex. Bus. &  Com. Code § 48.001  et seq.
Utah Utah Code  §§  13-44-101, -102, -201, -202, -310
Vermont Vt. Stat. tit.  9 § 2430  et seq.
Washington Wash. Rev.  Code § 19.255.010
Wisconsin Wis. Stat. § 895.507
Wyoming Wyo. Stat. § 40-12-501
District of Columbia D.C. Code §  28-  3851 et seq.

Total: 39 states and the District of Columbia.