Comprehensive privacy laws are proliferating worldwide in an effort by lawmakers to protect their citizenry from potential threats from an ever-increasing digital and data-focused world.
As a law firm operating at the intersection of privacy, marketing, and technology, it is critical that we stay at the cutting edge of the incredibly dynamic privacy law landscape. To this end, we have a resource page tracking some of the most significant privacy laws from around the globe. Now, with over 20 states in the United States passing a comprehensive privacy law, we are introducing our state-specific comprehensive privacy law tracker.
From first movers like the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), to the Colorado Privacy Act (CPA) and Virginia’s Consumer Data Protection Act (CDPA), we aim to track the latest legislative developments and provide expert guidance to clients on compliance requirements. Our services include drafting compliant privacy policies, conducting data protection impact assessments, and providing tailored advice on privacy rights requests such as DSARs, and related data handling practices. Our aim is to help clients stay ahead of the ever-changing privacy compliance curve with our proactive approach to privacy law compliance, ensuring your organization meets the stringent standards set by state regulations and avoids costly penalties.
TRACKER
January 2020
- California Consumer Privacy Act (CCPA) – passed June 2018
January 2023
- California Privacy Rights Act (CPRA) – passed November 2020
- Virginia Consumer Data Protection Act (CDPA) – passed March 2021
July 2023
- Colorado Privacy Act (CPA) – passed July 2021
- Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA) – passed May 2022
December 2023
- Utah Consumer Privacy Act (UCPA) – passed March 2022
July 2024
- Florida Digital Bill of Rights (FDBR) – passed in June 2023
- Oregon Consumer Privacy Act (OCPA) – passed in June 2023
- Texas Data Privacy and Security Act (TDPSA) – passed in June 2023
October 2024
- Montana Consumer Data Privacy Act (MCDPA)
Effective 2025
- Delaware Personal Data Privacy Act (DPDPA) – January 1, 2025
- Iowa Consumer Data Protection Act (ICDPA) – January 1, 2025
- New Hampshire’s SB 255 (the Act) – January 1, 2025
- New Jersey Data Privacy Act (NJDPA) – January 16, 2025
- Tennessee Information Protection Act (TIPA) – July 1, 2025
Effective 2026
- Indiana Consumer Data Protection Act (ICDPA) – January 1, 2026
- Kentucky Consumer Data Protection Act (KCDPA) – January 1, 2026