SB 3015 Hawaii Senate · 2026 Regular Session

RELATING TO PERSONAL INFORMATION.

Summary
Prohibits government entities from making personal information publicly accessible through a publicly accessible information system or publicly accessible source of information, except under certain conditions. Allows individuals who reasonably believe their personal information is publicly accessible through a government entity's publicly accessible information system or publicly accessible source of information to submit a written notice to the entity to require corrective action. Establishes a cause of action to compel compliance. Establishes statutory penalties for intentional noncompliance. Requires government entities to adopt and implement policies and procedures to prevent personal information from being publicly accessible. Requires government entities that own, license, maintain, use, collect, or possess personal information to implement and maintain certain reasonable security procedures and practices to protect the personal information. Requires government entities to provide notice to individuals in the case of a breach of a security system protecting personal information. Requires government entities to submit an annual report to the Legislature. Effective 1/1/2525. (SD1)
Bill status passed 3 of 5 stages cleared
Introduction
Jan 2026
Committee Review
Feb 2026
Senate Passage
Feb 2026
House Passage
Governor
Introduced Jan 23, 2026 Last action Feb 20, 2026
Maddy AI version diff · 1 comparison

What changed between versions

SB3015 SB3015_SD1 · 8 edits
MODERATE
The bill was completely rewritten to shift focus from protecting only the home addresses of public officials to a comprehensive data security law covering all personal information held by government entities. The new version addresses modern threats like identity theft and AI scraping by prohibiting the public posting of sensitive data, establishing a cause of action for violations, and requiring mandatory breach notifications and annual compliance reports.
Scope change
The bill's scope expanded significantly from a narrow exemption for public officials' home addresses to a broad mandate covering all government entities and all types of personal information (including financial, medical, and biometric data).
DEFINITION

Added a detailed definition of 'personal information' including social security numbers, financial account numbers, medical records, biometric data, and genetic data.

REQUIREMENT

Added a prohibition on government entities making personal information publicly accessible through websites or databases unless explicitly required by law.

Added a requirement for government entities to implement reasonable security procedures and practices to protect personal data.

Added a requirement for government entities to provide written notice to affected individuals in the event of a data breach.

Added a requirement for government entities to submit annual compliance reports to the legislature.

Removed the specific mechanism for redacting and requesting home addresses of public servants and candidates.

ENFORCEMENT

Added a new civil cause of action allowing individuals to sue for injunctive relief if their personal information is improperly disclosed, along with statutory damages for intentional violations.

TIMELINE

Changed the effective date from immediate approval to January 1, 2525.

Floor votes

How they voted

This bill passed the Senate by voice vote (no roll call recorded).
Full legislative history

Actions timeline

Total actions
10
Key actions
3
Committee
4
Feb 20, 2026
Upper · Passed
Report adopted; Passed Second Reading, as amended (SD 1) and referred to JDC.
upper
Feb 20, 2026
Committee
Reported from GVO (Stand. Com. Rep. No. 2676) with recommendation of passage on Second Reading, as amended (SD 1) and referral to JDC.
upper
Feb 17, 2026
Upper · Passed
The committee(s) on GVO recommend(s) that the measure be PASSED, WITH AMENDMENTS. The votes in GVO were as follows: 3 Aye(s): Senator(s) McKelvey, Hashimoto, Moriwaki; Aye(s) with reservations: none ; 1 No(es): Senator(s) Awa; and 1 Excused: Senator(s) Gabbard.
upper
Feb 2, 2026
Upper · Passed
The committee(s) on GVO has scheduled a public hearing on 02-05-26 3:01PM; CR 225 & Videoconference.
upper
Jan 30, 2026
Committee
Referred to GVO, JDC.
upper
Jan 23, 2026
Introduced
Introduced.
upper
8 primary · 0 co-sponsors

Sponsors