The National Conference of State Legislatures maintains a current list of state security breach notification laws here.