What a Hawaii business has to have in writing
Hawaii's written-policy load is driven by employment mandates rather than privacy law: HIOSH requires employers with 25 or more workers to keep a written safety and health program, the Prepaid Health Care Act forces almost every employer to file a health plan for staff working 20+ hours a week, and wage law requires written notice of pay and written benefit policies.
Larger employers must publish pay ranges in job ads, and insurance licensees certify a written security program to the Insurance Division.
Hawaii still has no comprehensive consumer privacy law, and its breach statute does not treat biometric data as personal information; the only biometric duty on the books is the 2026 Social Media Data Deletion Act, which reaches large social media platforms and not ordinary employers.
Hawaii has a rule of its own in 10 of the 14 areas, listed below. In 3 more we searched the state's own site and found nothing beyond the federal rule, but we have not finished writing up where we looked, so those are not shown yet. One area we have not checked yet.
Headcount
Industry General is always on
Hawaii rules for a 15–19 person general business
We check the same 14 areas of state law on every state page: breach notification, data security program, consumer privacy law, biometric and health data, harassment prevention, workplace safety programs, workplace violence prevention, insurance data security, state vendor security program, paid leave policies, required postings, pay transparency, licensing and certifications, and other written policies. Federal rules apply in most of these already. What this page adds is whether Hawaii has a rule of its own on top. The federal rules every employer carries follow the Hawaii rules. Each row names what you must write, post, file or certify, who enforces it, and links to the authority.
Breach Notification 1Who you must tell after a data breach, and how fast
Data Security Program 1A written safeguards program the state requires before anything goes wrong
Biometric and Health Data 1Consent and retention rules for fingerprints, faces and health data
Workplace Safety Programs 1Written programs the state safety agency requires beyond federal OSHA
Paid Leave Policies 2Sick and family leave laws that come with a written policy or notice
Required Postings 1The notices every workplace in the state must display
Pay Transparency 1Salary ranges in job posts and pay disclosure on request
Licensing and Certifications 2Registrations, licenses and certifications a business or its staff must hold
Other Written Policies 3Any other document the state makes an employer write or hand out
Because You Are in Construction 1Industry layer
Because You Are in Food & Beverage 1Industry layer
Because You Are in Financial & Tax 1Industry layer
Federal rules for a 15–19 person general business
Federal rules apply in every state, on top of the Hawaii rules above. Hawaii has an OSHA-approved State Plan covering private sector workers, so the state program enforces the workplace safety rows here and must be at least as effective as OSHA. OSHA State Plans ↗
From the publisher
Keep Your Written Policies in One Place
Whatever you are working toward, AllyMatter gets your policies approved, keeps every version and records who has read each one.
Your business type, with Hawaii on top
For another state
Need a hand implementing it?
Find a Consultant Who Does This Work
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
Sources
Hawaii DCCA Office of Consumer Protection - Security Breach NoticesHawaii State Legislature - HRS § 487N-2Hawaii Information Privacy and Security Council - Chapter 487NHawaii State Legislature - HRS § 487R-2Hawaii Information Privacy and Security Council - Chapter 487RHawaii Information Privacy and Security Council - Statutory ReferencesHawaii DLIR - HIOSHOSHA - Hawaii State PlanHIOSH - Fact SheetsHawaii Insurance Division - Insurance Data Security LawHawaii State Legislature - Act 112 (2021), S.B. 1100Hawaii Civil Rights Commission - Act 203 Pay Transparency FAQsHawaii Civil Rights Commission - Act 203 Pay Transparency and Equal Pay (PDF)Hawaii Civil Rights Commission - Act 203 FAQ (PDF)Hawaii DLIR - Labor Law PosterHawaii Civil Rights Commission - Employment Discrimination PosterHawaii DLIR Disability Compensation Division - About Prepaid Health CareHawaii DLIR - Highlights of the Hawaii Prepaid Health Care Law (PDF)Hawaii DLIR - Prepaid Health Care Plan Application Form HC-7Hawaii DLIR Disability Compensation Division - About TDIHawaii DLIR Wage Standards Division - Hawaii Family LeaveHawaii DLIR - Hawaii Expands Family Leave LawHawaii DLIR - Wage Standards DivisionHawaii State Legislature - HRS § 388-7Hawaii Civil Rights CommissionHawaii State Legislature - HRS § 378-92Hawaii DCCA - Business Registration DivisionHawaii Business ExpressHawaii Department of Taxation - Licensing InformationHawaii Department of Taxation - Form BB-1 packetHawaii Department of Taxation - General Excise Tax InformationHawaii DCCA PVL - Contractors License BoardHawaii DCCA - Regulated Industries Complaints OfficeHawaii Department of Health - Food Safety CodeHawaii Department of Health - Sanitation BranchHawaii State Legislature - HB 1753 measure status, Act 252 on 07/14/2026Hawaii State Legislature - HB 1753 CD2, enacted textHawaii Revised Statutes § 487N-1 (definition of personal information, biometric data not included)