Hawaii has taken significant steps to ensure the privacy and data security of its citizens. The Uniform Employee and Student Online Privacy Protection Act prohibits employers from demanding, coercing, or soliciting personal information. Furthermore, HB 2051 established Hawaii's privacy law, which outlines consumer rights in relation to the collection of personal information by companies. This law also outlines the responsibilities of companies that handle sensitive personal information, such as identifying stolen information.
Law 136 requires Hawaiian companies to properly delete “personal information” in their records, while Law 135 requires Hawaiian companies to notify an individual when their personal information is compromised by unauthorized disclosure. The Hawaii Consumer Privacy Protection Act (SB 41) further reinforces consumers' rights by providing greater protection for consumer data. This includes the right to access and discover data held by companies and the right to delete it. Chapter 487R requires that any company or government agency that does business in Hawaii or maintains or otherwise possesses the personal information of a Hawaii resident must “take reasonable steps to protect itself against access to no authorized to or use the information in connection with or after its deletion” (Haw.). When a company or government agency maintains or possesses records or data containing personal information of Hawaii residents that are not owned or authorized to do so, the notification of a security breach must be notified to the owner or licensee of the information immediately after discovering it (HAW).
The law applies to any company that holds or licenses personal information from Hawaii residents, to any company that does business in Hawaii and that holds or licenses personal information in any form, or to any government agency that collects personal information for specific government purposes. In order to ensure customers' privacy and data security is protected in Hawaii, businesses must comply with all applicable laws and regulations. Companies should take reasonable steps to protect themselves against unauthorized access and use of personal information. Additionally, businesses should notify individuals when their personal information is compromised by unauthorized disclosure. Finally, businesses should evaluate whether they need to comply with other state laws. Hawaii has taken important steps towards protecting its citizens' privacy and data security.
Companies must adhere to all applicable laws and regulations in order to ensure customers' privacy and data security is protected. By taking reasonable steps to protect against unauthorized access and use of personal information, businesses can ensure they are compliant with all applicable laws. Finally, businesses should evaluate whether they need to comply with other state laws.
