What is the data breach notification deadline in Hawaii?

Hawaii requires notice to affected individuals in the most expedient time possible and without unreasonable delay (Haw. Rev. Stat. §487N-1 et seq.).

Do you have to notify the Hawaii Attorney General of a data breach?

Yes. Hawaii Office of Consumer Protection must be notified.

← All jurisdictions

HI · data breach notification

Hawaii

med

Haw. Rev. Stat. §487N-1 et seq.

Individual deadline

No fixed limit

Trigger standard

Risk of harm

AG / regulator

Required

Notice to individuals	in the most expedient time possible and without unreasonable delay
Risk-of-harm standard	notice where illegal use has occurred or is reasonably likely, creating risk of harm
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	Hawaii Office of Consumer Protection, required above 1,000 residents; at the time cras are notified Written notice to OCP
Credit reporting agencies	Notify CRAs above 1,000 residents.
Substitute notice	Available if cost exceeds $100,000 or more than 200,000 affected.
Private right of action	Yes.
Penalties	Up to $2,500 per violation; injured-party action

Rule last verified July 10, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a Hawaii breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →