Significant Privacy Laws From Around The Globe
Privacy law and related practice areas, such as cybersecurity, are some of the most dynamic areas of the law. From privacy laws mandating privacy policies, limitations that greatly impact digital advertising, and data security requirements, the obligations and risks posed to businesses worldwide are increasing at a rapid pace.
Here, we provide resources for those looking to understand the global landscape concerning privacy law and related legislative developments.
State “Comprehensive” Privacy Laws In The United States
* Denotes Future Enforcement Date
| State Privacy Law | Passage Date | Enforcement Date |
|---|---|---|
| California Consumer Privacy Act (CCPA) | June 2018 | Jan. 2020 |
| California Privacy Rights Act (CPRA) | Nov. 2020 | Jan. 2023 |
| Colorado Privacy Act (CPA) | July 2021 | July 2023 |
| Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA) | May 2022 | July 2023 |
| Indiana Indiana Consumer Data Protection Act* | May 2023 | Jan. 2026 |
| Iowa Consumer Data Protection Act* | March 2023 | Jan. 2025 |
| Kentucky Consumer Data Protection Act (KCDPA)* | April 2024 | Jan. 2026 |
| Maryland Online Data Privacy Act (Pending Gov. Sig.) | April 2024 | Oct. 2025 |
| Montana Montana Consumer Data Privacy Act | May 2023 | Oct. 2024 |
| Nebraska Data Privacy Act | April 2024 | Jan. 2025 |
| New Jersey Data Privacy Legislation SB 332* | Jan. 2024 | Jan. 2025 |
| New Hampshire Data Privacy Act* | March 2024 | Jan. 2025 |
| Oregon Consumer Privacy Act (OCAPA)* | June 2023 | July 2024 |
| Virginia Consumer Data Protection Act (CDPA) | March 2021 | Jan. 2023 |
| Tennessee Information Protection Act* | May 2023 | July 2025 |
| Texas Data Privacy and Security Act* | June 2023 | July 2024 |
| Utah Consumer Privacy Act (UCPA) | March 2022 | Dec. 2023 |
View more details on state-specific comprehensive privacy laws in the United States here.
Additional Privacy Laws In The United States
Gramm-Leach-Bliley Act (GLBA)
Various Other Laws Incl. Data Breach & Cybersecurity Laws
ASIA
China’s Personal Information Protection Law (PIPL)
Singapore’s Personal Data Protection Act (PDPA)
EUROPE
The EU’s General Data Protection Regulation (GDPR)
The UK’s General Data Protection Regulation (GDPR)
CANADA
Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
AUSTRALIA
Australian Privacy Act
SOUTH AMERICA
Brazil’s General Personal Data Protection Law (Lei Geral de Proteção de Dados Pessoais)