Bill > SB3016

This bill updates Hawaii's existing law regarding data and security breaches to better protect individuals' privacy by expanding the definition of "personal information" that triggers notification requirements. It introduces new definitions for "identifier," which includes common identifying details like names, usernames, phone numbers, and email addresses, and "specified data element," which encompasses sensitive information such as social security numbers, driver's license numbers, financial account details, biometric data, and health insurance numbers, with exceptions for certain protected health information. The bill also clarifies that telecommunications carriers who comply with specific federal regulations are considered compliant with the state's security breach notice requirements. These changes are intended to address the evolving landscape of digital privacy and ensure that individuals are notified when a broader range of their personal data is compromised, thereby reducing the risk of identity theft and other harms.

Business and Industry

https://www.capitol.hawaii.gov/session/measure_indiv.aspx?billtype=SB&billnumber=3016&year=2026