O’Melveny Releases Updated State-by-State Guide to US Data Breach Notification Laws

O’Melveny’s Data Strategy, Security and Privacy team has released an updated comprehensive guide to US breach notification laws. For each US state and territory, the guide details information on covered entities, definitions of personal information and breach, thresholds for notification, who must be notified, the timing and manner of notification, and other key provisions. Companies can use the guide as a resource in preparing for and responding to data breaches.

Our data security and privacy lawyers assist clients throughout the entire data security and privacy life cycle, from counseling, policy formation, and incident management to leading sensitive negotiations with law enforcement and regulatory agencies at home and abroad. Should data breaches result in class-action litigation or regulatory proceedings, our award-winning litigation and investigations lawyers draw on their decades of success in and out of court to chart the most favorable path forward.

This report is a summary for general information and discussion only and may be considered an advertisement for certain purposes. It is not a full analysis of the matters presented, may not be relied upon as legal advice, and does not purport to represent the views of our clients or the Firm. Scott W. Pink, an O’Melveny special counsel licensed to practice law in California and Illinois; Randall W. Edwards, an O’Melveny partner licensed to practice law in California; Sid Mody, an O’Melveny partner licensed to practice law in Texas; Emily Losi, an O’Melveny associate licensed to practice law in New York; Ashley Kang, an O’Melveny summer law clerk; Sean Oh, an O’Melveny summer law clerk; and Gavin Reece Barrett, an O’Melveny summer law clerk; contributed to the content of this newsletter. The views expressed in this newsletter are the views of the authors except as otherwise noted.

© 2025 O’Melveny & Myers LLP. All Rights Reserved. Portions of this communication may contain attorney advertising. Prior results do not guarantee a similar outcome. Please direct all inquiries regarding New York’s Rules of Professional Conduct to O’Melveny & Myers LLP, 1301 Avenue of the Americas, Suite 1700, New York, NY, 10019, T: +1 212 326 2000.