close
close
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
View other resources

Summary of State-Level Privacy Regulations

Until we do have a federal law like Europe has the General Data Protection Regulation (GDPR), we’ll have to navigate the patchwork of state-level regulations, but this doesn’t have to be as difficult as it sounds. Although there are some nuances to the individual state laws, there are similarities among them.

We built this guide because we could not find anything that clearly laid out what makes one privacy law distinct from the other. We outline what similarities the regulations have, and identify any interesting nuances to each state-side law worth noting.

Stateside Data Privacy Laws Snapshot

State Name Effective Date Requires Risk Assessment Applies to Employee Data Protects Customers from Discrimination Provides Right to Appeal Requires Consent to Process Sensitive Data Provides Right to Limit Use of Sensitive Info Requires Opt-Out Signal Recognition
CA CCPA 1/1/2020 (CCPA)
1/1/2023 (CPRA)
future

(*Future regulations will require risk assessments)
yes
yes
no
no
yes
yes
CO CPA 7/1/2023
yes
no
yes
yes
yes
 N/A
yes

(*effective July 1, 2024)
CT CTDPA 7/1/2023
yes
no
yes
yes
yes
 N/A
yes

(*effective 2025)
DE DPDPA 1/1/2025
yes
no
yes
yes
yes
 N/A
yes
FL FDBR 7/1/2024
yes
no
yes
yes
yes
 N/A
no
IN ICDPA 1/1/2026
yes
no
yes
yes
yes
 N/A
no
IA ICDPA 1/1/2025  
no
yes
yes
no
yes

(must offer consumers an opt-out)
no
MT MTCDPA 10/1/2024
yes
no
yes
yes
yes
 N/A
yes

(*effective January 1, 2025)
OR OCPA 7/1/2024
yes
no
yes
yes
yes
 N/A
yes

(*effective January 1, 2026)
TN TIPA 7/1/2025
yes
no
yes
yes
yes
 N/A NO
TX TDPSA 7/1/2024
yes
no
yes
yes
yes
 N/A
yes

(*effective January 1, 2025)
UT UCPA 12/31/2023
no
no
yes
no
no
yes

(must offer consumers an opt-out)
no
VA VCDPA 1/1/2023
yes
no
yes
yes
yes
 N/A
no
WA MHMDA 3/31/2024
no
no
yes
yes
yes
 N/A
no
continue reading