Bill > SB1038

This bill updates Hawaii's privacy laws by expanding the definitions of "personal information" and introducing a new term "specified data element" in response to recommendations from a 2019 privacy task force. The bill defines "specified data element" to include sensitive identifying information such as social security numbers, driver's license numbers, financial account details, biometric data, security codes, and health insurance identifiers. The definition of "personal information" is broadened to include combinations of an individual's name, electronic mail address, username, phone number, and other identifying details when paired with unencrypted specified data elements. The expanded definitions aim to provide more comprehensive protection against identity theft and personal data breaches by capturing a wider range of potentially sensitive personal information. The bill is part of an effort to modernize privacy regulations in response to the increasing use of digital technologies and the growing risks associated with personal data exposure. The changes will take effect on April 1, 2026, giving organizations time to update their data handling and protection practices.