Hawaii - Session 2026
Title: Personal Information; Government Entities; Publicly Accessible Information Systems; Publication Controls; Data Security; Notification; Cause of Action; Reports
Prohibits government entities from making personal information publicly accessible through a publicly accessible information system or publicly accessible source of information, except under certain conditions. Allows individuals who reasonably believe their personal information is publicly accessible through a government entity's publicly accessible information system or publicly accessible source of information to submit a written notice to the entity to require corrective action. Establishes a cause of action to compel compliance. Establishes statutory penalties for intentional noncompliance. Requires government entities to adopt and implement policies and procedures to prevent personal information from being publicly accessible. Requires government entities that own, license, maintain, use, collect, or possess personal information to implement and maintain certain reasonable security procedures and practices to protect the personal information. Requires government entities to provide notice to individuals in the case of a breach of a security system protecting personal information. Requires government entities to submit an annual report to the Legislature. Effective 1/1/2525. (SD1)
Tracking state legislation? Support LegiList with a small contribution. Independent, ad-free, and built by one developer.
| Date | Event | Detail |
|---|---|---|
| 0000-00-00 | Introduced | Bill introduced |
| 2026-02-20 | Status | in_committee |
| 2026-02-20 | Latest Action | Report adopted; Passed Second Reading, as amended (SD 1) and referred to JDC. |