Guide ยท State law
Which state breach laws cover biometric data?
States whose breach law covers biometric data (22)
- Arizona
- Arkansas
- California
- Colorado
- Connecticut
- Delaware
- District of Columbia
- Florida
- Illinois
- Iowa
- Louisiana
- Maryland
- Nebraska
- New Mexico
- New York
- North Carolina
- Oregon
- South Dakota
- Vermont
- Washington
- Wisconsin
- Wyoming
States whose breach law does not cover biometric data (29)
- Alabama
- Alaska
- Georgia
- Hawaii
- Idaho
- Indiana
- Kansas
- Kentucky
- Maine
- Massachusetts
- Michigan
- Minnesota
- Mississippi
- Missouri
- Montana
- Nevada
- New Hampshire
- New Jersey
- North Dakota
- Ohio
- Oklahoma
- Pennsylvania
- Rhode Island
- South Carolina
- Tennessee
- Texas
- Utah
- Virginia
- West Virginia
Breach laws vs biometric privacy laws
A breach law that covers biometric data requires notice when it is exposed. Separate biometric privacy laws, in some states, govern collection and use. This page covers breach statutes only.
| State | Biometric data covered |
|---|---|
| Alabama | No |
| Alaska | No |
| Arizona | Yes |
| Arkansas | Yes |
| California | Yes |
| Colorado | Yes |
| Connecticut | Yes |
| Delaware | Yes |
| District of Columbia | Yes |
| Florida | Yes |
| Georgia | No |
| Hawaii | No |
| Idaho | No |
| Illinois | Yes |
| Indiana | No |
| Iowa | Yes |
| Kansas | No |
| Kentucky | No |
| Louisiana | Yes |
| Maine | No |
| Maryland | Yes |
| Massachusetts | No |
| Michigan | No |
| Minnesota | No |
| Mississippi | No |
| Missouri | No |
| Montana | No |
| Nebraska | Yes |
| Nevada | No |
| New Hampshire | No |
| New Jersey | No |
| New Mexico | Yes |
| New York | Yes |
| North Carolina | Yes |
| North Dakota | No |
| Ohio | No |
| Oklahoma | No |
| Oregon | Yes |
| Pennsylvania | No |
| Rhode Island | No |
| South Carolina | No |
| South Dakota | Yes |
| Tennessee | No |
| Texas | No |
| Utah | No |
| Vermont | Yes |
| Virginia | No |
| Washington | Yes |
| West Virginia | No |
| Wisconsin | Yes |
| Wyoming | Yes |
Readers arriving from the old Network USA fingerprint pages: see our domain history.
Frequently asked questions
Which states have biometric data breach laws?
The PRC 2026 survey records 22 jurisdictions whose breach notification law covers biometric data: Arizona, Arkansas, California, Colorado, Connecticut, Delaware, District of Columbia, Florida, Illinois, Iowa, Louisiana, Maryland, Nebraska, New Mexico, New York, North Carolina, Oregon, South Dakota, Vermont, Washington, Wisconsin, Wyoming.
Are fingerprints personal information under breach laws?
In states whose breach law covers biometric data, fingerprints are typically included. Check the specific statute.
Sources
Last updated 2026-10-20.