Guide · State law

How do breach laws treat Social Security and ID numbers?

State breach laws usually define personal information as a name combined with sensitive identifiers such as a Social Security number or a driver licence number. These identifiers appear because they can be used to open accounts or impersonate someone, so their exposure is a core trigger for notice.

Why SSNs and ID numbers are in breach definitions

A Social Security number or a government ID number, paired with a name, is a key to credit and identity. Breach statutes list them so that exposure triggers notice and, in some states, other steps. Details vary by state.

State excerpts that mention Social Security numbers

Of our PRC 2026 extracts, 13 breach or personal information excerpts mention Social Security numbers. This is only what the extracted text says; other states may also cover them in parts of the statute not extracted.

State excerpts that mention driver licence numbers

15 excerpts mention driver licence numbers:

If your SSN was in a breach

The FTC's IdentityTheft.gov has steps for exposed Social Security numbers. See also what to do after a data breach notice.

Readers arriving from older Network USA links about Social Security numbers and ID rules: see our domain history.

Frequently asked questions

Are Social Security numbers covered by data breach laws?

Social Security numbers are a standard element of personal information in state breach laws. In our PRC 2026 extracts, 13 state excerpts mention them explicitly; check each statute.

What should I do if my SSN was in a data breach?

Follow the FTC steps at IdentityTheft.gov, which include checking credit reports and considering a credit freeze or fraud alert.

Sources

Last updated 2026-10-20.