It is important for you to know which data security and privacy laws affect your business. Most states have enacted laws that require all businesses to keep personal information secure and to notify individuals in the event that security is breached. Real estate commissions in some states have enacted regulations pertaining to data security and document retention.
Many of these state laws apply to any business in the country that maintains personal information of a resident of that state. So, it is wise not only to refer to the laws of the state in which your business is located, but also the laws of the states where your clients may reside.
NAR’s Data Security and Privacy Toolkit contains citations to state laws addressing data disposal and data security breach notification. Citations to the state laws can also be found on the National Conference of State Legislatures website at: