Privacy law in Hawaii

There is no signed, comprehensive consumer privacy law in Hawaii yet. Hawaii Senate Bill 1037 (the Consumer Data Protection Act) was introduced in the 2025 legislative session and proposes broad privacy rights for Hawaii residents — including rights to access, correct, delete, and opt out of data sales — but as of this extraction, the bill has not been signed into law. Here is what pending legislation proposes, what narrow protections do exist, and what you can still do to remove your data from brokers.

What protections do exist in Hawaii

Hawaii Security Breach of Personal Information Notification Act

Hawaii requires businesses and government agencies to notify affected individuals when a security breach involving their personal information occurs. The notification must be made in the most expedient time possible. SB 1037 itself references this existing law (§ 487N-2) in its processor obligations. (Haw. Rev. Stat. § 487N-2)

Hawaii Uniform Information Practices Act

This law governs the collection, maintenance, use, and disclosure of personal information held by Hawaii state agencies. It gives individuals the right to access and correct records about themselves held by government agencies, but does not apply to private-sector data brokers. (Haw. Rev. Stat. ch. 92F)

Federal protections that apply to Hawaii residents

Even without a state comprehensive privacy law, federal protections still apply to Hawaii residents. The FTC can take action against companies that engage in unfair or deceptive data practices under Section 5 of the FTC Act. HIPAA protects your medical information held by healthcare providers and insurers. COPPA requires verifiable parental consent before collecting personal data from children under 13. The Gramm-Leach-Bliley Act provides some protections for your financial data held by banks and financial institutions.

What’s happening in the Hawaii legislature

Several privacy bills have been introduced in Hawaii. None has passed into law yet, but they signal where consumer privacy legislation in the state may be heading.

SB 1037 — Consumer Data Protection Act

SB 1037 would establish a comprehensive Consumer Data Protection Act in Hawaii, giving residents rights to access, correct, delete, and obtain a portable copy of their personal data, as well as the right to opt out of targeted advertising, data sales, and certain automated profiling. It would apply to businesses that process data of at least 100,000 consumers, or at least 25,000 consumers if more than 25% of gross revenue comes from data sales. Enforcement would be exclusive to the Department of the Attorney General, with civil penalties up to $7,500 per violation and a 30-day cure period. Status: introduced. Read the bill text.

How Optery helps Hawaii residents

Data brokers collect and sell personal information about almost every American adult — home addresses, phone numbers, family relationships, employment history. They do this regardless of whether your state has a comprehensive privacy law. Optery scans over 200 data brokers to find where your information is exposed, then submits removal requests on your behalf and tracks compliance. Our service works for every US resident, not just those in states with strong privacy statutes.

See which data brokers have your information →