The National Conference of State Legislatures has an excellent resource for anyone trying to keep track of state breach disclosure laws:

At least 43 states, the District of Columbia and Puerto Rico have enacted legislation requiring notification of security breaches involving personal information.

Arizona | Ariz. Rev. Stat. § 44-7501 (2007 S.B. 1042, Chapter 23)

Arkansas | Ark. Code § 4-110-101 et seq.

California | Cal. Civ. Code § 1798.82

etc.