Security breach notification laws or data breach notification laws are laws that require individuals or entities affected by a data breach, unauthorized access to data, to notify their customers and other parties about the breach, as well as take specific steps to remedy the situation based on state legislature.

Such laws have been irregularly enacted in all 50 U.S. states since 2002. Currently, all 50 states have