United States Cybersecurity and Privacy Resources
State Level

Arizona

• Arizona’s Data-Breach Notification Law.

California

California Consumer Privacy Act of 2018

California Privacy Rights Act (CPRA)

Colorado

• Colorado Privacy Act (CPA)

Connecticut

• Connecticut Data Privacy Act (CTDPA)

Georgia

• Law of Georgia on Personal Data Protection. Last update: December 28, 2011.

Illinois

• ​​Illinois Data Breach Law. Last update: January 01, 2006

Kansas

• House bill no. 2019

• House bill no. 2560

• Information Technology Security Standards and Cyber Security Awareness Guide. Last update: January 2, 2021

Maryland

• State Minimum Cybersecurity Standards. Last update: May 22, 2023

• Maryland Personal Information Protection Act - Security Breach Notification Requirements. Last update:  October 1, 2019

• Guidelines for the Public Disclosure of Cybersecurity Incidents. Last update: October 1, 2022

• Cybersecurity incident reporting requirements for public utilities. Last update: November 10, 2023

• Standards and Guidance for Authentication of External Users. Last update: July 22, 2021

• Supplemental Guidance on Passwords and the use of Password Managers. Last update: July 22, 2021

• Guidelines For Locals To Certify Compliance With State Minimum Cybersecurity Standards. Last update: June 09, 2023

• State Of Maryland Information Technology Security Manual. Last update: June 28, 2019

New Mexico

Information Security Operation Management.

New York

• Stop Hacks and Improve Electronic Data Security Act (SHIELD Act

• New York State Department of Financial Services, Cybersecurity Requirements for Financial Services Companies ( 23 NYCRR 500) Last Update: November 1, 2023

Massachusetts

Massachusetts Bill H.4806 — An Act relative to consumer protection from security breaches

New Jersey

New Jersey — An ACT concerning disclosure of breaches of security and amending P.L.2005, c.226 (S. 51)

Nevada

Nevada Senate Bill 220 Online Privacy Law.

Texas

Texas – An Act relating to the privacy of personal identifying information and the creation of the Texas Privacy Protection Advisory Council

Washington

• Washington – An Act Relating to breach of security systems protecting personal information (SHB 1071)

• Washington My Health My Data Act (MHMDA)

Oregon

Oregon Consumer Information Protection Act (OCIPA) SB 684. (Link not available)

Utah

• Utah Consumer Privacy Act (UCPA)

Vermont

• Information Security Standards. Last update: January 15, 2020.

• Cybersecurity Directive 19-01. Last update: February 19,2019

• Cybersecurity Standard Update 2023-01. Last update: February 16, 2023.