Patient Privacy Rights

At least 39 states have enacted legislation requiring notification of security breaches involving personal information.

Arizona	Ariz. Rev. Stat. § 44-7501 (2007 S.B. 1042, Chapter 23)
Arkansas	Ark. Code § 4-110-101 et seq.
California	Cal. Civ. Code  § 1798.82
Colorado	Colo. Rev.  Stat. § 6-1-716
Connecticut	Conn. Gen Stat.  36a-701(b)
Delaware	Del. Code  tit. 6, §  12B-101 et seq.
Florida	Fla. Stat. § 817.5681
Georgia	Ga. Code §§ 10-1-910,  -911
Hawaii	Haw. Rev.  Stat. § 487N-2
Idaho	Idaho Code §§ 28-51-104 to  28-51-107
Illinois	815 ILCS 530/1  et seq.
Indiana	Ind. Code  §§ 24-4.9 et  seq., 4-1-11  et seq.
Kansas	Kan. Stat. 50-7a01,  50-7a02
Louisiana	La. Rev.  Stat. § 51:3071 et  seq.
Maine	Me. Rev.  Stat. tit. 10 §§ 1347  et seq.
Maryland	Md. Code,  Com. Law § 14-3501 et  seq.
Massachusetts	2007 H.B.  4144, Chapter  82
Michigan	Mich. Comp. Laws  § 445.61 et  seq.
Minnesota	Minn. Stat. §§  325E.61,  325E.64
Montana	Mont. Code § 30-14-1701  et seq.
Nebraska	Neb. Rev.  Stat. §§ 87-801, -802, -803, -804, -805, -806, -807
Nevada	Nev. Rev.  Stat. 603A.010 et  seq.
New Hampshire	N.H. Rev.  Stat. §§ 359-C:19  et seq.
New Jersey	N.J. Stat.  56:8-163
New York	N.Y. Gen.  Bus. Law § 899-aa
North Carolina	N.C. Gen.  Stat § 75-65
North Dakota	N.D. Cent.  Code § 51-30-01 et  seq.
Ohio	Ohio Rev. Code §§ 1347.12, 1349.19, 1349.191, 1349.192
Oklahoma	Okla. Stat. § 74-3113.1
Oregon	2007 S.B.  583, Chapter  759
Pennsylvania	73 Pa. Stat. § 2303 (link not available)(2005 S.B. 712, Act 94)
Rhode Island	R.I. Gen.  Laws § 11-49.2-1  et seq.
Tennessee	Tenn. Code § 47-18-2107
Texas	Tex. Bus. &  Com. Code § 48.001  et seq.
Utah	Utah Code  §§  13-44-101, -102, -201, -202, -310
Vermont	Vt. Stat. tit.  9 § 2430  et seq.
Washington	Wash. Rev.  Code § 19.255.010
Wisconsin	Wis. Stat. § 895.507
Wyoming	Wyo. Stat. § 40-12-501
District of Columbia	D.C. Code §  28-  3851 et seq.

Total: 39 states and the District of Columbia.