Achieve Data Security: Know the Laws

It is important for you to know which data security and privacy laws affect your business. Most states have enacted laws that require all businesses to keep personal information secure and to notify individuals in the event that security is breached. Real estate commissions in some states have enacted regulations pertaining to data security and document retention.

Many of these state laws apply to any business in the country that maintains personal information of a resident of that state. So, it is wise not only to refer to the laws of the state in which your business is located, but also the laws of the states where your clients may reside.

NAR’s Data Security and Privacy Toolkit contains citations to state laws addressing data disposal and data security breach notification. Citations to the state laws can also be found on the National Conference of State Legislatures website at:


Notice: The information on this page may not be current. The archive is a collection of content previously published on one or more NAR web properties. Archive pages are not updated and may no longer be accurate. Users must independently verify the accuracy and currency of the information found here. The National Association of REALTORS® disclaims all liability for any loss or injury resulting from the use of the information or data found on this page.