Over the last several months, a minority of states amended their data breach notification statutes or enacted sector-specific breach notification requirements. Specifically, nine states amended their state statutes to (1) impose notice requirements on state entities, (2) broaden existing definitions (e.g., expand the definition of “personal information”), (3) increase reporting content requirements, (4) regulate the insurance industry, (5) regulate the tax industry, (6) require stricter notification timeframes, and (7) allow the Attorney General to publish data breach information. Below is a high-level overview of each state’s data breach notification statute amendments, which are further summarized in the chart below.