Comprehensive privacy laws are proliferating worldwide as lawmakers seek to protect their citizenry from potential threats in an ever-increasing digital and data-focused world.
As a law firm operating at the intersection of privacy, marketing, and technology, it is critical that we stay at the cutting edge of the incredibly dynamic privacy law landscape. To this end, we have a resource page tracking some of the most significant privacy laws from around the globe. Now that over 20 states in the United States have passed comprehensive privacy laws, we are introducing our state-specific comprehensive privacy law tracker.
From first movers like the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), to the Colorado Privacy Act (CPA) and Virginia’s Consumer Data Protection Act (CDPA), we aim to track the latest legislative developments and provide expert guidance to clients on compliance requirements. Our services include drafting compliant privacy policies, conducting data protection impact assessments, and providing tailored advice on privacy rights requests, such as DSARs, and related data handling practices. Our aim is to help clients stay ahead of the ever-changing privacy compliance curve with our proactive approach to privacy law compliance, ensuring your organization meets the stringent standards set by state regulations and avoids costly penalties.
STATE BY STATE COMPREHENSIVE PRIVACY LAW TRACKER
2020
- California Consumer Privacy Act (CCPA) – passed June 2018
2023
- California Privacy Rights Act (CPRA)
- Virginia Consumer Data Protection Act (CDPA)
- Colorado Privacy Act (CPA)
- Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA)
- Utah Consumer Privacy Act (UCPA)
2024
- Florida Digital Bill of Rights (FDBR) (outlier as applies primarily to companies with over $1 billion in revenue)
- Oregon Consumer Privacy Act (OCPA)
- Texas Data Privacy and Security Act (TDPSA)
- Montana Consumer Data Privacy Act (MCDPA)
2025
- Delaware Personal Data Privacy Act (DPDPA)
- Iowa Consumer Data Protection Act (IoCDPA)
- New Hampshire’s SB 255 (the Act)
- New Jersey Data Privacy Act (NJDPA)
- Tennessee Information Protection Act (TIPA)
- Maryland Online Data Privacy Act (MODPA)
- Minnesota Consumer Data Privacy Act (MCDPA)
- Nebraska Data Privacy Act (NDPA)
2026
- Indiana Consumer Data Protection Act (InCDPA)
- Kentucky Consumer Data Protection Act (KCDPA)
- Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
- A Look Back at 2025: Shifts and Amendments in State Data Privacy Law: This year marked a noticeable slowdown in the passage of new state comprehensive privacy laws, even as states introduced hundreds of bills and focused on major amendments to existing statutes. Nine states updated their laws to expand consumer rights, tighten protections for minors, and incorporate new rules regarding artificial intelligence and profiling. Enforcement actions surged, especially in California, where the CPPA led settlements and penalties for non-compliance, and data brokers remained under heightened scrutiny amid new regulatory and registration requirements. The landscape also saw increased attention to health privacy, youth online safety, and impact assessments for automated decision-making, setting a tone of intensified state legislation and enforcement ahead of federal movement. Read More →