Skip to main content
Browse requirements
X-STATE-REASONABLE-SECURITY Informational

Maintain Reasonable Security Safeguards & Secure Data Disposal

Official citation: State data-security & secure-disposal statutes

Class: informational · Severity: high

Requirement text

State data-security & secure-disposal statutes

What it means

Many states impose a free-standing reasonable-security duty and a secure-disposal duty on any business holding residents' personal information, separate from breach-notification and procurement rules.

Required by

  • — Mass. Gen. Laws ch. 93H; 201 CMR 17.00
  • — Cal. Civ. Code §§ 1798.81.5, 1798.81
  • — Or. Rev. Stat. § 646A.622
  • — Tex. Bus. & Com. Code § 521.052
  • — 815 ILCS 530/45
  • — R.I. Gen. Laws § 11-49.3-2
  • — N.Y. Gen. Bus. Law § 899-bb
  • — Utah Code § 13-44-201
  • — Nev. Rev. Stat. § 603A.210

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.