HI SB1038

Adds a new definition of "specified data element" to Hawaii law that includes social security numbers, government-issued identification numbers, financial account and credit card numbers, biometric data, private cryptographic keys, and health insurance policy numbers.

Expands the definition of "personal information" to include an individual's first initial or first name combined with their last name, usernames, email addresses, and phone numbers when combined with any specified data element that is not encrypted, redacted, or otherwise protected.

Broadens the scope of "personal information" from the current requirement of combining name with only social security number, driver's license number, or financial account information to include nine categories of specified data elements.

Clarifies that "personal information" excludes publicly available information that is lawfully made available to the general public.

Takes effect July 1, 3000, with the expanded definition of personal information effective April 1, 2026.