State Requirements
State Cybersecurity Statutes
Most states have enacted statutes governing data security, breach notification, and the protection of personal information — obligations that often reach government contractors regardless of any contract clause. The states below have a cybersecurity or data-protection statute on the books; open a state to read its plain-language summary and primary-source citations.
11 states with a published cyber/data-protection statute.
- ConnecticutDep't of Admin. Servs. Div. of Procurement Servs.; State Contracting Standards Board
- FloridaDep't of Management Servs.
- IllinoisDep't of Central Management Servs.
- MarylandDep't of Gen. Servs.; Bd. of Public Works
- MississippiDep't of Finance and Admin.; Bureau of Purchasing and Contracting; Bureau of Building, Grounds, and Real Property Mgmt.
- New HampshireDep't of Admin. Servs. Bureau of Purchase and Property
- New MexicoNM Gen. Servs. Dep't
- OhioDep't of Admin. Servs.
- TexasOff. Comptroller Public Accounts Statewide Procurement Div.
- UtahDiv. of Purchasing and Gen. Servs. (Dep't of Gov't Operations)
- West VirginiaW.Va. Dep't Admin. Purchasing Div.
Looking for federal statutes (FISMA, CISA 2015, the False Claims Act and more)? See Federal Statutes.