Crawls the web, in Hawaii

Haw. Rev. Stat. Secs. 487R-1 to 487R-3 · Read the law's page

• Take reasonable measures to protect against unauthorized access to or use of personal information in connection with or after its disposal.
• Implement and monitor compliance with policies and procedures that require papers containing personal information to be burned, pulverized, recycled, or shredded, and electronic or other nonpaper media containing personal information to be destroyed or erased, so the information cannot practicably be read or reconstructed.
• Describe the adequate destruction or proper disposal of personal records as official policy in the business's own writings.
• Where a records-destruction vendor is contracted to destroy personal information, satisfy this duty by exercising due diligence: reviewing an independent audit of the vendor's operations or compliance, obtaining reliable information about the vendor or requiring the vendor be certified by a recognized trade association, or reviewing and evaluating the vendor's information security policies and procedures.
• This binds any business or government agency that conducts business in Hawaii, or that maintains or otherwise possesses personal information of a Hawaii resident.
• This chapter does not apply to a financial institution subject to the Gramm-Leach-Bliley Act (15 U.S.C. 6801 to 6809), a health plan or health care provider subject to and compliant with the HIPAA privacy and security standards, or a consumer reporting agency subject to and compliant with the Fair Credit Reporting Act.

Haw. Rev. Stat. §§ 708-890 to 708-895.7 · Read the law's page

• Accessing a computer, computer system, or computer network connected to Hawaii without the permission of its owner or rightful user, or in excess of the permission granted, is unauthorized access under this statute; ordinary automated retrieval of a public, unauthenticated page has not been tested against this definition by a Hawaii court.
• Unauthorized access aggravated by commercial or financial gain, by furthering another crime, by obtaining information worth more than $20,000, or by obtaining information a statute or court rule protects, is unauthorized computer access in the first degree, a class A felony; unaggravated unauthorized access that obtains information is the second degree (class B felony), and unaggravated access alone is the third degree (class C felony).
• Knowingly accessing a computer with intent to commit theft is computer fraud, graded by the degree of theft intended, up to a class A felony.
• Knowingly or intentionally causing unauthorized damage to a computer, computer system, or computer network is computer damage, graded up to a class A felony where the computer manages or controls critical infrastructure.