HI SB2292

Expands the definition of "personal information" in Hawaii's data breach notification law (Chapter 487N) to include additional identifiers and data elements beyond the current limited definition.

Defines "identifier" to include first name or initial with last name, online user names, mobile phone numbers, and individual email addresses.

Defines "specified data elements" to include social security numbers, government IDs, passport numbers, financial account numbers, credit/debit card numbers, security codes and passwords, biometric data, private authentication keys, and health insurance identification numbers.

Updates "personal information" to mean an identifier in combination with one or more specified data elements, replacing the previous requirement for name combined with specific financial or identification data.

Adds insurance licensees subject to Hawaii's Insurance Data Security Law to the list of entities deemed in compliance with the data breach notification requirements.