Skip to content

Cyber Liability by state

Hawaii data breach notification law and cyber insurance

Direct answer

What is Hawaii's data breach notification law?

Hawaii's breach notification law (Haw. Rev. Stat. sect. 487N-1 et seq.) requires businesses to notify affected residents without unreasonable delay after a breach of personal information. Hawaii requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, with notice to the Office of Consumer Protection above 1,000 residents.

Reviewed by Cornerstone Staff28 years of financial services state licensing experienceLast verified July 29, 2026

What the statute requires

Hawaii requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, with notice to the Office of Consumer Protection above 1,000 residents. Cyber liability insurance typically covers the forensics, notification, and legal review this statute requires.

Consumer notification deadline
Without unreasonable delay
Regulator notice
Notify the Hawaii Office of Consumer Protection when a breach requires notice to more than 1,000 residents.
Credit bureau notice
Notify consumer reporting agencies when a breach requires notice to more than 1,000 residents.
Safe harbor
Notification is not required if the compromised data was encrypted and the encryption key was not acquired.
Enforcement
The statute authorizes civil penalties for each violation and allows affected residents to recover actual damages.

Statutes and sources

  • Hawaii Security Breach of Personal Information Law

    Haw. Rev. Stat. sect. 487N-1 et seq.

Regulator: Hawaii Office of Consumer Protection . Last verified 2026-07-29 from the official source .

Get Hawaii coverage handled

Share a few details and an agent will respond within one business day.