In 2019, the US data privacy framework changed significantly with the emergence of the California Consumer Privacy Act which created a significant compliance burden for most businesses that collect personal information about California residents. Since then, activity at the state level has increased as more states look to establish data privacy laws in the absence of a comprehensive data privacy law at the federal level. Currently, a total of twenty states have passed comprehensive data privacy laws in the United States: California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Florida, Montana, Oregon, Delaware, New Hampshire, New Jersey, Kentucky, Nebraska, and Rhode Island. Of those twenty, California, Colorado, Connecticut, Virginia, Utah, Florida, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire and New Jersey's laws are currently effective while Tennessee, Minnesota and Maryland's privacy laws will become effective later in 2025. This US Data Privacy Guide provides insight on these and other US data privacy laws and regulations.
Please see full publication below for more information.
