States have moved to develop their own laws given there is a lack of federal regulation of notice requirements to consumers in the event of cyber breaches. The purpose of this paper is to provide a systematic comparison of the existing regulations with respect to data breaches involving personally identifiable information across the states. The National Association of Insurance Commissioners (NAIC) Insurance Data Security Model Law is also examined. (November 1, 2020)