Hawaii data breach notifications

Businesses that own or license personal information of Hawaii residents must notify affected residents and the Office of Consumer Protection following discovery of a security breach.

How DisclosureLens indexes Hawaii filings

DisclosureLens polls the Hawaii AG portal on a regular schedule, fetches each new notice, extracts a structured BreachDisclosure v1 record, resolves the affected entity to its LEI/CIK when possible, and publishes via the REST API (webhooks and STIX/TAXII delivery are planned).

Portal online, archive shrinking. The Hawaii OCP portal currently publishes only a limited recent window of notices; DisclosureLens retains the earlier filings it had already ingested. DisclosureLens continues to poll the portal for new Hawaii filings; the main DisclosureLens feed continues to cover SEC, HHS OCR, the other US state AGs, and international DPAs.

Extraction provenance

Extracted records carry per-field source citations into the Hawaii AG notice they came from, plus a per-record confidence score and a full extraction audit trail. Hawaii filings inherit the same BreachDisclosure v1 schema as SEC 8-Ks, HHS OCR notices, and EU DPA registers — same fields, same provenance metadata, deduped against same-incident filings in other jurisdictions. Full pipeline details: Sources & Methodology.

Statute

Haw. Rev. Stat. § 487N-2

Authoritative source

https://cca.hawaii.gov/ocp/notices/security-breach/

Corrections

Email corrections@disclosurelens.com — 48-hour SLA from receipt.