Figure 1: State Statutes*

* The private cause of action against the party responsible for the breach is assigned to the data collector whose information was breached.