We update the myriad of state data breach notification laws on a quarterly basis in what we fondly call the Mintz Data Breach Matrix. Hot off the presses is the version current as of October 1, 2011. All the usual disclaimers apply: in the event of a multi-state data breach, the matrix is not a substitute for legal advice from practitioners with experience responding to data breaches.
We hope that it is a useful resource.