State Privacy Legislation

With federal legislation acting as the catalyst for more stringent, industry-specific policies regarding privacy and the disposal of confidential information, states have been increasingly writing their own regulations into law. Some states have enacted their own information security legislation. Where no state legislation exists, federal law takes precedence.

Information about the following state laws is included here:

• The Florida Unlawful Use of Personal Identification Act
• The Illinois Personal Information Protection Act
• The New Jersey Identity Theft Protection Act
• The New York Information Security Breach and Notification Act
• The North Carolina Identity Theft Protection Act
• The Pennsylvania Breach of Personal Information Notification Act
• The Texas Information Disposal Act