United States State Laws

Privacy regulation at the state level is fractured and inconsistent. While most state laws were in response to specific narrow issues (Illinois' (740 ILCS § 14/). Biometric Information Privacy Act.), some states, like California, are passing more comprehensive privacy laws. Each state passing their own, often inconsistent, laws introduce risks. The risks of consumer confusion over which laws apply to them. The risk individuals think they are protected but aren't because a law doesn't apply to them. Disparate state laws also drive up the compliance costs for organizations.

This Wiki uses the Solove Taxonomy as a means of classifying segments of state law. This can help identify gaps as well as provide a roadmap for companies trying to match their activities applicable laws.

»AL »AK »AZ »AR »CA »CO »CT »DE »FL »GA »HI »ID »IL »IN »IA »KS »KY »LA »ME »MD »MA »MI »MN »MS »MO »MT »NE »NV »NH »NJ »NM »NY »NC »ND »OH »OK »OR »PA »RI »SC »SD »TN »TX »UT »VT »VA »WA »WV »WI »WY

State Privacy Related Laws and Regulations of the United States

States	Laws and Regulations
Alabama (AL)	AL SB 301 Alabama Data Breach Notification Act of (2018) CH. 482-1-122. Alabama Insurance Regulation. §25-5-339. Confidentiality of information. §420-5-7-.05. Patient Rights. §420-5-7-.13. Medical Record Services. §545-X-4-.08. Medical Examiners And Medical Licensure Commission
Alaska (AK)	AK. SB 217. Chapter 13. Genetic Privacy. AK. Statutes Title 11. Criminal Law § 11.61.120. Harassment in the second degree §45.48.100-.290. Credit Report and Credit Score Security Freeze. §45.48.400. Protection of Social Security Number.
Arizona (AZ)	AZ Revised Statutes Title 13. Criminal Code § 13-1425. Unlawful disclosure of images depicting states of nudity or specific sexual activities; classification; definitions AZ. HB 2144. Genetic testing; Informed consent. AZ. SB 1297. Genetic testing information; Confidentiality; Exceptions. SB 1309. Parents' Bill of Rights. §1-602. Parents' bill of rights; definition. §12-2803. Testing of minors; notice to parents; informed consent. §20-448-.02. Unfair discrimination; definitions. §41-151.22. Privacy of user records; violation; classification; definition. §8. Right to Privacy.
Arkansas (AR)	AR Code Title 5. Criminal Offenses § 5-26-314. Unlawful distribution of sexual images or recordings AR. HB 1827. Chapter 35. Parents' Bill of Rights. AR. HB 1902. Social media accounts of current and prospective students or employees — Definitions. §4-110-104. Protection of personal information.
California (CA)	CA AB 713 CA AB No. 499 CA CIVIL § 1798.81 CA CIVIL § 1798.82 CA CIVIL § 1798.85 CA PEN § 647 CA SB 203 CA. SB 327. (2018) California Consumer Credit Reporting Agencies Act California Consumer Privacy Act of (2018) California Privacy Rights Act California Song-Beverly Credit Card Act (1971) Rachel's Test §10181- §10181.13. Review of Rate Increases. §1798.81.5. Customer Records. §1798.83-§1798.84. Customer Records. §1798.90.1. Confidentiality of Driver's License Information. §22575. Internet Privacy Requirements. §22576—§22578. Internet Privacy Requirements. §22580—§22582. Privacy Rights for California Minors in the Digital World. §22948.20. Connected Televisions. §24175. Miscellaneous Health and Safety Provisions. §56.10. Disclosure of Medical Information by Providers. §56.17. Disclosure of Genetic Test Results by a Health Care Service Plan. §6267. Inspection of Public Records. §637.5. Invasion of Privacy. §980. Employer Using Social Media. §99120-§99122. Social Media Privacy.
Colorado (CO)	CO. HB 09-1338. CO. HB 18-2118. Concerning Strengthening Protections For Consumer Data Privacy. CO. SB 15-077. Parent's Bill of Rights. Colorado Privacy Act Colorado Revised Statute Section Section 18-7-107, 108 §10-3-1104.6. Genetic information -limitations on disclosure of information -liability definitions -legislative declaration. §8-2-127. Prohibitions of employer-requiring access to personal electronic communication devices-definitions-rules.
Connecticut (CT)	CH. 743DD. Protection of Social Security Numbers and Personal Information. CT. STAT. Medical Records (1984) Connecticut General Statutes Title 53A. Penal Code § 53a-189c. Unlawful dissemination of an intimate image: Class A misdemeanor Connecticut Insurance Information and Privacy Protection Act. §36A-701B. Breach of security re computerized data containing personal information. §42-471. Safeguarding of personal information. Social Security numbers. Privacy protection policy. Civil penalty.
Delaware (DE)	DEL. HB 180. Breaches of Security involving Personal Information. DEL. SB 151. Genetic Information. DEL. SB 79. The Eligibility of Registered Qualifying Patients under the Delaware Medical Marijuana Act to purchase or possess firearms. § 1335. Violation of privacy; class A misdemeanor; class G felony §1201-§1208. Informed Consent and Confidentiality. §1201C-§1206C. Online and Personal Privacy Protection. §1203. Civil actions for false claims. §1204C. Prohibitions on online marketing or advertising to a child. §1205C. Posting of privacy policy by operators of commercial online sites and services. §1206C. Privacy of information regarding book service users. §709A. Employer use of social media. §8103. Academic institution; prohibited acts.
Florida (FL)	FL XLVI. Crimes § 784.049. Sexual cyberharassment FLA. HB 1189 FLA. SB 1670. Consumer Data Privacy. §23. Right to Privacy. §332.143. Use of a driver license or identification card. §395.3025. Patient and personnel records; copies; examination. §501.0117. Credit cards; transactions in which seller or lessor prohibited from imposing surcharge; penalty. §501.171. Security of confidential personal information. §668.60-§668.610. Electronic Mail Communications Act. §760.40. Genetic testing; informed consent; confidentiality; penalties; notice of use of results. §790.338. Medical privacy concerning firearms; prohibitions; penalties; exceptions. §817.06, §817.14-411—§817.4115. False Pretenses and Frauds, Generally.
Georgia (GA)	SB 236. Georgia Personal Identity Protection Act. § 16-11-90 Crimes and Offenses §16-11-62. Eavesdropping, surveillance, or intercepting communication which invades privacy of another; divulging private message. §19-7-45. Blood tests. §31-33-1—§31-33-8. Health Records. §33-54-1. Legislative findings and determinations; intent of chapter. §33-54-3. Purpose of testing; consent required; confidential and privileged information. §33-54-6. Use of information for scientific research purposes authorized. §46-5-214. Action in event of telephone record security breach.
Hawaii (HI)	§ 711-1110.9. Violation of privacy in the first degree §431:10A-118. Genetic information nondiscrimination in accident and health or sickness insurance coverage. §431:10A-404.5. Genetic information nondiscrimination in extended health insurance coverage. §432:1-607. Genetic information nondiscrimination in health insurance coverage. §432:2-404.5. Genetic information nondiscrimination in health insurance coverage. §432D-26. Genetic information nondiscrimination in health insurance coverage.
Idaho (ID)	§ 18-6609. Crime of video voyeurism §39-8301—§39-8304. Genetic Testing Privacy Act.
Illinois (IL)	(105 ILCS 85/) Student Online Personal Protection Act (105 ILCS § 75/10). Right to Privacy in the School Setting Act. (110 ILCS 149/) Student Parent Data Collection Act (110 ILCS 74/) Student Optional Disclosure of Private Mental Health Act (15 ILCS 335/) Illinois Identification Card Act (20 ILCS 1375/) Illinois Information Security Improvement Act (20 ILCS 450/) Data Security on State Computers Act (205 ILCS 715/) Data Processing Services for Financial Institutions Act (205 ILCS 730/) Blockchain Technology Act (410 ILCS § 50/). Medical Patient Rights Act. (410 ILCS § 513/). Genetic Information Privacy Act (5 ILCS 179/) Identity Protection Act (720 ILCS §-23.5.). Non-consensual dissemination of private sexual images (740 ILCS § 14/). Biometric Information Privacy Act. (815 ILCS 530/) Personal Information Protection Act. (815 ILCS § 530/10). Notice of breach; notice to Attorney General. (815 ILCS. § 510/). Uniform Deceptive Trade Practices Act. ILL. HB 2189. The Genetic Information Privacy Act. ILL. HB 2557. Artificial Intelligence Video Interview Act. ILL. SB 0318. Use of genetic testing information by employers. ILL. SB 1307. The Genetic Information Privacy Act. ILL. SB 1507 Civil Remedies for Nonconsensual Dissemination of Private Sexual Images Act ILL. SB 1624 ILL. SB 2399. State Tax Preparer Oversight Act. ILL. SB 941. The Cancer Drug Repository Program Act. §6. Searches, Seizures, Privacy and Interceptions.
Indiana (IN)	§16-39-1-1. Right of access; written requests; effective duration. §16-39-2. Release of Mental Health Records to Patient and Authorized Persons. §24-4.9-3-3.5. Duties of a data base owner; exceptions; health records; enforcement powers. §24-4.9-3. Chapter 3. Disclosure and Notification Requirements.
Iowa (IA)	191—90.37(505) Financial and Health Information Regulation 653-13.2(148, 272C). Standards of practice—appropriate pain management. Senate File 2215. The use of genetic information and samples for genetic testing and providing for civil and administrative enforcement and providing penalties. §507B.4. Unfair methods of competition and unfair or deceptive acts or practices defined. §513B.10. Availability of Coverage. §513B.9A. Eligibility to enroll. §715C. Personal Information Security Breach Protection.
Kansas (KS)	KS. SB 367. Juvenile Justice System. § 21-6101. Breach of privacy §40-2259. Genetic screening or testing; prohibiting the use of; exceptions; restrictions. §50-7A02. Security breach; requirements. §72-6214. Right of privacy policies; definitions.
Kentucky (KY)	806 KAR 3:220. Privacy of Health Information. KY. HB 5. The Safety and Security of Personal Information held by Public Agencies. KY. SB 152. Parents' Rights. §304.12-085. Denial of insurance because of race, color, religion, national origin, or sex prohibited -- Genetic tests. §365.725. Destruction of customer's records containing personally identifiable information. §61.931. Personal information security and breach investigation procedures and practices for certain public agencies and nonaffiliated third parties.
Louisiana (LA)	R.S. 14:283.2. Nonconsensual disclosure of a private image §14:323. Tracking devices prohibited; penalty. §17:3914. Student information; privacy; legislative intent; definitions; prohibitions; parental access; penalties. §22:1023. Prohibited discrimination; genetic information; disclosure requirements; definitions. §22:1097. Discrimination in rates or failure to provide coverage because of severe disability or sickle cell trait prohibited. §22:1604. Customer privacy; protections. §23:368. Prohibition of genetic discrimination in the workplace; privacy. §40:1165.1. Healthcare Information; records. §40:2210. Prohibited discrimination; prenatal test results; genetic information. §5. Right to Privacy. §51:1951—§51:1955. Personal Online Account Privacy Protection Act. §51:2002—§51:2003. Unsolicited Commercial Electronic Mail Restrictions. §51:3071—§51:3074. Database Security Breach Notification Law.
Maine (ME)	ME. STAT. § 1711-C (1999) § 511. Violation of privacy §1347-A—§1348. The Notice of Risk to Personal Data Act. §1497. Electronic mail solicitation restricted. §1711. Patient access to hospital medical records. §19302. Employment discrimination on the basis of genetic information or genetic testing. §2204. Definitions; Insurance Information and Privacy Protection Act. §616—§619. Employee Social Media Privacy. ME. STAT. § 1711-C (1999)
Maryland (MD)	MD. HB 1127. Maryland Financial Consumer Protection Commission. MD. HB 716. Maryland Data Privacy Act. MD. HB 901 (2019) MD. HB 974. Maryland Personal Information Protection Act. MD. SB 613. Consumer Personal Information Privacy. § 3-809. Criminal Law §13-2002. Health-General. §14-3501. Commercial Law. §14-3503. Commercial Law. §19-706. Health-General. §20-601. State Government. §26-401. Education. §27-909. Insurance. §3-712. Labor and Employment. 2019 SB 786 2019 SB 871
Massachusetts (MA)	201 CMR 17.00. Standards For The Protection of Personal Information of Residents of The Commonwealth. CH. 82. Security Freezes and Notification of Data Breaches. CH. 93H Security Breaches CH. 93I. Dispositions and Destruction of Records. MA. BH. 1900. Ensuring patient privacy and control with regard to health information exchanges. MA. BH.2814. Addressing Cybercrime through Enhanced Criminal Penalties, Civil Remedies, and Transparency. Preamble Article XIV. Protects individuals from disturbing an individual's tranquility or solitude. §105. Credit cards; checks; personal identification information. §120E. Unfair discrimination based on results of genetic test or the provision of genetic information prohibited; genetic tests as condition to issuance or renewal of policy on the life of person prohibited. §1B. Citizens' Rights to Privacy. §70G. Genetic information and reports protected as private information; prior written consent for genetic testing. Genetic information and reports protected as private information; prior written consent for genetic testing (1920) Genetic information and reports protected as private information; prior written consent for genetic testing (1920) Standards for the Protection of Personal Information of Residents of the Commonwealth (2010) Standards for the Protection of Personal Information of Residents of the Commonwealth (2010)
Michigan (MI)	Medical Records Access Act. Michigan Identity Theft Protection Act (2004) § 750.145e. Compiled Laws §333.16221. Investigation of licensee, registrant, or applicant for licensure or registration; hearings, oaths, and testimony; complaint. §333.17020. Genetic test; informed consent. §333.17520. Genetic test; informed consent. §37.271-§37.278. Internet Privacy Protection Act. §500.2212C. Prescription drug prior authorization workgroup; creation; development of methodology; prior authorization request; definitions. §500.3829A. Medicare supplement policies or certificates delivered, issued for delivery, or renewed on or after May 21, 2009; genetic test; definitions. Genetic test; informed consent (2000)-PUBLIC HEALTH CODE (EXCERPT) Act 368 of 1978 Genetic test; informed consent (2000)
Minnesota (MN)	H.F. 5. Minnesota Insurance Marketplace Act. MN. H.F. 112. The use of Genetic Information by Government Entities; creating new Consumer Protection Law regarding use of Genetic Information. § 617.261. Nonconsensual dissemination of private sexual images §13.386. Treatment of Genetic Information held by Government Entities and other persons. §144.192. Treatment of Biological Specimens and Health Data held by The Department of Health and Health Boards. §144.293. Release or Disclosure of Health Records. §176.138. Medical Data; Access. §181.94. Genetic Testing in Employment. §325E.61. Data Warehouses; Notice Required For Certain Disclosures. §325E.64. Access Devices; Breach of Security. §325F.982. Consumer Identification Information. §325M.02-§325M.07. Trade Regulation, Consumer Protection. §609.746. Interference with privacy. §62V.06. Data Practices. §72A.492-§72A.505. Insurance. MS §13.386 Minn. Stat. §§325 M.01 to .09
Mississippi (MS)	30-17-2635 Rule 10.4. Release of Patient Records to Patient. MS. HB 583. Notice of a Breach of Security. §41-119-13. Ensure that patient specific health information be disclosed only in accordance with the provisions of the Health Insurance Portability and Accountability Act of 1996. §97-29-63. Coercion as a means of Indecent Filming of Another. 19 Miss. Code R. § 1-28.17
Missouri (MO)	§ 573.110. Nonconsensual dissemination of private sexual images, offense of — definitions — elements — exemptions — immunity from liability, when — penalty — private cause of action, when. § 573.112. Threatening the nonconsensual dissemination of private sexual images, offense of — elements — penalty. §161.096. Statewide longitudinal data system, regulation on student data accessibility, transparency, and accountability required—regulation requirements—data not to be reported—rulemaking authority—violation, penalty—attorney general. §182.815-§182.817. Education and Libraries. §191.277. Medical records to be released to patient, when, exception—fee permitted, amount—liability of provider limited—annual handling fee adjustment—disclosure of deceased patient records. §375.1300-§375.1309. Business and Financial Institutions. §565.252. Invasion of Privacy, Penalty.
Montana (MT)	§10. Right of Privacy. §30-14-1704 and §33-19-32. Computer Security Breach; Definitions. §39-2-307. Employer access limited regarding personal social media account of employee or job applicant--conditions for exceptions--employer retaliation prohibited--penalties. §50-16-541. Requirements and procedures for patient's examination and copying. §7-5-4124. Destruction Of Municipal Records. Prohibition against use of genetic information and requests for genetic testing (2009) Prohibition against use of genetic information and requests for genetic testing (2009)
Nebraska (NE)	Nebraska Financial Data Protection and Consumer Notification of Data Security Breach Act. §427A.872. Division to adopt regulations prescribing statewide standard for measuring outcomes and assessing and evaluating certain young persons with autism spectrum disorders; reports to Division. §48-3503. Employer; prohibited acts. §48-3504. Waiver of right or protection under act prohibited. §48-3506. Employee acts prohibited. §48-3507. Employer's rights not limited by act. §48-3509. Personal Internet account; employer; duty; liability. §71-551. Physician; genetic tests; written informed consent; requirements; Department of Health and Human Services; duty. §71-8403. Access to Medical Records. §87-302. Deceptive trade practices; enumerated.
Nevada (NV)	CH. 412. Genetic Information. NV. SB 220. Internet Privacy. NV. SB 426. Growth and Infrastructure; Transportation. NV. SB 538. Internet Privacy. § 200.780. Unlawful dissemination of intimate image; exceptions; penalty §205.498. Provider of Internet service required to keep certain information concerning subscribers confidential; notice required to be provided to subscribers. §603A.010-§630A.290. Security of Information Maintained by Data Collectors and Other Businesses. §603A.040. Personal Information; Defined. §603A.340. Notice regarding covered information collected by operator: Operator required to make available to consumers; contents; period to remedy failure to comply with requirements; exception. §613.135. Unlawful acts of employer relating to social media account of employee or prospective employee. §629.061. Inspection; copies; use in public hearing; immunity of certain persons from civil action for disclosure. §629.151. Obtaining genetic information of person without consent unlawful; exceptions. §629.161. Retention of genetic information that identifies person without consent unlawful; exceptions; destruction of genetic information. Nev. Stat. §87-302(14) NRS §629.101 et seq.
New Hampshire (NH)	NH. HB 1262. Student Assessment Data Privacy. NH. HB 1484. Late fees in Manufactured Housing Parks. NH. HB 1493. Ownership of DNA. NH. HB 1586. Student and Teacher Information Protection and Privacy. NH. HB 536. Biometric Information to The Consumer Protection Act. NH. SB 316. Protection of Personal Information. Notice of Security Breach of New Hampshire. (2007) § 644:9 Violation of Privacy. §132:10-A. Newborn Screening Tests Required; Newborn Screening Advisory Committee. §141-H:2. Conditions of Genetic Testing. §151:21. Patients' Bill of Rights. §189:70. Educational Institution Policies on Social Media. §275:74. Use of Social Media and Electronic Mail.
New Jersey (NJ)	CH. 126. Genetic Privacy Act. NJ. HB A4640. Certain businesses to notify data subjects of collection of personally identifiable information and establishes certain security standards. Senate Bill 322 §1 - C.2C:14-9 Title 2A. Chapter 58D. §18A:3-30. Actions prohibited by institution of higher education. §26:14-4. Informed consent defined; use. §30:4-24-.2. Rights of patients. §34:6B-6. Prohibited actions by employers. §56:8-162. Methods of destruction of certain customer records.
New Mexico (NM)	NM. HB 0015. Data Breach Notification Act. NM. HB 0141. Governmental Conduct Act. NM. HB 369. Genetic Information Privacy Act. NM. SB 445. Uniform Protection of Genetic Information in Employment Act. § 30-37A-1. Unauthorized distribution of sensitive images; penalties §50-4-34. Request for access to social networking account prohibited. Requirements for Acute Care, Limited Services and Special Hospitals (2004) N.M. Stat. §21-1-46 NMSA §24-21-1 et seq. N.M. Stat. Ann. §24-21-3 Genetic Information Privacy Act (1978) Genetic Information Privacy Act (1978)
New York (NY)	23 NYCRR 500. Cybersecurity Requirements For Financial Services Companies. CVR § 50. Right of privacy. GEN § 899-AA. Notification; person without valid authorization has acquired private information. GEN § 899-BB. Data Security Protections. Internet Security and Privacy Act NY EDN § 2-D. Unauthorized release of personally identifiable information. NY GBS § 399-DDD Confidentiality of Social Security Account Number NY STT § 106. Responsibility to respond to the freedom of information law for certain data NY STT §§ 301-309. Electronic Signatures and Records Act NY. A465. Personal Information Protection Act. NY. S5575B Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) NY. SB 1203. Biometric Privacy Act. §2442. Informed consent, Public Health (PBH). §2444. Human research review committees. §2615. Insurance (ISC). §79-L. Confidentiality of records of genetic tests. §89. General provisions relating to access to records; certain cases.
North Carolina (NC)	CH. 53B. Financial Privacy Act. CH. 90. Medical Records. North Carolina Identity Theft Protection Act § 14-190.5A. Disclosure of private images §132-1.10. Social security numbers and other personal identifying information. §58-2-105. Confidentiality of medical and credentialing records. §58-39-45. Access to recorded personal information.
North Dakota (ND)	CH. 13-02-21. Disclosure of Customer Information by Financial Institutions. CH. 51-30. Notice of Security Breach for Personal Information. ND. SB 2334. § 12.1-17-07.2. Distribution of intimate images without or against consent--Penalty §23-12-14. Copies of medical records and medical bills. §26.1-36-12.4. Confidentiality of medical information.
Ohio (OH)	CH. 3798. Protected Health Information. OH. SB 220. A legal safe harbor to covered entities that implement a specified cybersecurity program. §1349.19. Private disclosure of security breach of computerized personal information data. §3904.13. Disclosure of personal or privileged information.
Oklahoma (OK)	HB 1877. Oklahoma Medical Marijuana Act of 2017. OK. HB 2245. Security Breach Notification Act. OK. SB 1257. Non-consensual dissemination; making certain dissemination unlawful; providing for exceptions, penalties. Effective date. §173.2. Limitations on Employer Access to Online Social Media Accounts of Employees-Remedies for Violations. §25-2001. Parents' Bill of Rights – Scope of rights. §36-3614.1. Genetic Nondiscrimination in Insurance Act. §36-3614.3. Disclosure of genetic information.
Oregon (OR)	CH. 680. Dental Hygienists; Denturists. OR. SB 244. DNA tests and declaring an emergency. Oregon Consumer Information Protection Act. § 166.065. Harassment §192.531-§192.549. Genetic Privacy. §192.531. Genetic Privacy. §192.553. Policy for protected health information. §350.272-§350.274. Social Media. §646.607. Unlawful business, trade practices. §646A.622. Requirement to develop safeguards for personal information; conduct deemed to comply with requirement; defenses. §659A.330. Employee social media account privacy.
Pennsylvania (PA)	PA. HB 245 The Breach of Personal Information Notification Act. § 3131. Unlawful dissemination of intimate image §115.29. Patient access. §4107. Deceptive or fraudulent business practices. §7507.1. Invasion of Privacy.
Rhode Island (RI)	CH. 16-103. Student Social Media Privacy. CH. 28-56. Employee Social Media Privacy. CH. 48.1. Consumer Privacy Protection Act. Rhode Island Identity Theft Protection Act of 2015. §11-49.3-2. Risk-based information security program. §23-17-27. Disclosure of nonparticipation in hospital service plan. §27-18-52. Genetic Testing. §27-18-52.1. Genetic Information. §27-19-44. Genetic Testing. §27-20-39. Genetic Testing. §27-41-53. Genetic Testing. §9-1-28.1. Right to privacy – Action for deprivation of right.
South Carolina (SC)	CH. 1. Trade and Commerce; General Provisions. CH. 93. Privacy of Genetic Information. SC. SB 1224. Michelle's Law. §44-7-325. Fee for search and duplication of medical record; time limits for compliance with request for record.
South Dakota (SD)	SD. SB 62. (2018) § 22-21-4. Use or dissemination of visual recording or photographic device--Violation as misdemeanor or felony. §34-14-21 TO §34-14-25. Medical Research. §36-2-16. Medical records released to patient or designee on request--Expenses paid by patient--Violation as misdemeanor.
Tennessee (TN)	TN. HB 2029 (2018) TN. HB 2690 (2018) Tennessee Information Protection Act (TIPA) § 39-13-301. Criminal Offenses §47-18-2107. Release of personal consumer information. §49-1-702. Data Accessibility, Transparency and Accountability Act; Part Definitions. §50-1-1001 TO §50-1-1004. Employee Online Privacy Act of 2014. §56-7-124. Release of information relating to physical or mental health of patient. §56-7-2704. Genetic information—Privacy—Prohibited disclosures. §63-2-101 TO §63-2-102. Medical Records. §65-21-108. Priority of messages - Privacy.
Texas (TX)	CH. 241. Hospitals. CH. 521. Unauthorized Use of Identifying Information. CH. 546. Use of Genetic Testing Information. CH. 58. Use of Genetic Information. Chapter 503 of the Texas Business and Commerce Code - Biometric Identifiers MEDICAL RECORDS PRIVACY TX. HB 2891 (2017) § 21.16. UNLAWFUL DISCLOSURE OR PROMOTION OF INTIMATE VISUAL MATERIAL. §74.052. Authorization Form for Release of Protected Information.
Utah (UT)	CH. 45. Genetic Testing Privacy Act. § 76-5b-203. Distribution of an intimate image--Penalty §13-37-201 TO §13-37-203. Notice of Disclosure. §13-37-202. Disclosure of nonpublic personal information prohibited without notice. §13-44-201 TO §13-44-202. Protection of Personal Information. §34-48-201 TO §34-48-203. Prohibited and Permitted Activities. §53A-1-1401 TO §53A-1-1411. Student Data Protection Act. §53B-25-101 TO §53B-25-102. Internet Postsecondary Institution Privacy Act; General Provisions. §78B-5-618. Patient access to medical records--Third party access to medical records.
Vermont (VT)	CH. 217. Genetic Testing. CH. 62. Protection of Personal Information. VT. REG. B-2018-01 (2018) VT. REG. IH-2001-01 § 2606. Disclosure of sexually explicit images without consent §10201. Statement of policy on financial privacy. §495I. Employment based on credit information; prohibitions.
Virginia (VA)	CH. 5.1. Human Research. Ch. 52 Consumer Data Protection Act VA. HB. 2081 (2015) § 18.2-386.2. Unlawful dissemination or sale of images of another; penalty § 32.1-127.1:03. Health records privacy. §23.1-405. Student records and personal information; social media. §38.2-508.4. Genetic information privacy. §38.2-613. Disclosure limitations and conditions. §40.1-28.7:5. Social media accounts of current and prospective employees.
Washington (WA)	CH. 19.255. Personal Information—Notice of Security Breaches. CH. 70.02. Medical Records—Health Care Information Access and Disclosure. WA. HB 2213 (2017) Washington My Health My Data Act § 9.61.260. Cyberstalking §49.44.200 TO §49.44.205. Personal social networking accounts—Restrictions on employer access—Definitions. §70.02.010. Definitions §70.02.080. Patient's examination and copying—Requirements.
West Virginia (WV)	CH. 46A West Virginia Consumer Credit and Protection Act. WV. SB 578 (2017) § 61-8-28. Criminal invasion of privacy; penalties §18-2-5h. Student Data Accessibility, Transparency and Accountability Act. §21-5h-1. Employer access to employee or potential employee personal accounts prohibited. §47-28-4. Wrongful use or disclosure of protected health information for solicitation of legal services regarding the use of medications.
Wisconsin (WI)	§ 942.09. Representations depicting nudity §134.198. Notice of unauthorized acquisition of personal information. §146.38. Health care services review; confidentiality of information. §995.50. Right of privacy. §995.55. Internet Privacy Protection.
Wyoming (WY)	CH. 31. Volunteer Health Services Program. Wyoming Consumer Protection Act. §14-2-710. Confidentiality of genetic testing. §35-2-618. Medical staff committees; record confidentiality.

See also

• Federal Privacy Laws of the United States