I would be quite confident in saying that all 50 states have identity theft legislation. They're remarkably different from each other in a number of ways. You might see up to a dozen different patterns that are repeated throughout the 50 states, so it's not “one size fits all”. There's quite a bit of variation, but for the most part, I would say that all 50 states do have something that addresses misconduct with respect to identity information in one form or another.
On September 17th, 2009. See this statement in context.