Complete Database

U.S. State Privacy Laws

Every state privacy law β€” comprehensive status, consumer rights summary, and effective dates. Filter by status or search by state name.

Filter:

States with Active Privacy Laws

22
🌴
California
CCPA / CPRA
βœ… Active
Effective: Jan 1, 2020 / Jan 1, 2023
The nation's most comprehensive state privacy law β€” grants access, deletion, correction, and opt-out of sale and sharing.
πŸ›οΈ
Virginia
CDPA
βœ… Active
Effective: Jan 1, 2023
Consumer Data Protection Act β€” strong rights for access, correction, deletion, portability, and opt-out of sale and targeted advertising.
⛰️
Colorado
CPA
βœ… Active
Effective: July 1, 2023
Colorado Privacy Act β€” requires universal opt-out (GPC) support, data protection assessments, and broad consumer rights.
🏠
Connecticut
CTDPA
βœ… Active
Effective: July 1, 2023
One of the strongest state laws β€” requires GPC support, treats data of consumers under 18 as sensitive, broad rights.
πŸ”οΈ
Utah
UCPA
βœ… Active
Effective: Dec 31, 2023
Utah Consumer Privacy Act β€” business-friendly dual threshold but includes opt-out rights for sale and targeted advertising.
⭐
Texas
TDPSA
βœ… Active
Effective: July 1, 2024
Texas Data Privacy and Security Act β€” no minimum data volume threshold; applies to any for-profit business processing Texans' data.
🌊
Florida
FDBR
βœ… Active
Effective: July 1, 2024
Florida Digital Bill of Rights β€” scoped to large tech companies ($1B+ revenue) but provides strong rights for covered services.
🦌
Montana
MCDPA
βœ… Active
Effective: Oct 1, 2024
Montana Consumer Data Privacy Act β€” lower 50K consumer threshold than most states; full consumer rights suite.
🌲
Oregon
OCPA
βœ… Active
Effective: July 1, 2024
One of the most expansive state laws β€” fewer exemptions, includes nonprofits (July 2025), and broader data definitions.
πŸ’Ό
Delaware
DPDPA
βœ… Active
Effective: Jan 1, 2025
Very low 35K consumer threshold β€” one of the broadest scopes of any state law; strong consumer rights across the board.
🌽
Iowa
ICDPA
βœ… Active
Effective: Jan 1, 2025
Iowa Consumer Data Protection Act β€” Virginia-model law with a 90-day cure period and opt-out rights for sale and targeted ads.
🌧️
Washington
My Health MY Data Act
βœ… Active
Effective: Mar 31, 2024
Groundbreaking health data law extending protection beyond HIPAA β€” covers apps, wearables, geofencing near clinics. Private right of action.
🍁
New Hampshire
NHPA
βœ… Active
Effective: Jan 1, 2025
New Hampshire Privacy Act β€” low 35K consumer threshold, full consumer rights, opt-in for sensitive data.
🌾
Nebraska
NDPA
βœ… Active
Effective: Jan 1, 2025
No minimum data volume threshold β€” the broadest applicability of any state law (subject to SBA small business exemption).
πŸ™οΈ
New Jersey
NJDPA
βœ… Active
Effective: Jan 15, 2025
Escalating penalty structure β€” first violation $10K, subsequent $20K; full consumer rights suite with profiling opt-out.
🎸
Tennessee
TIPA
βœ… Active
Effective: July 1, 2025
Tennessee Information Protection Act β€” NIST framework safe harbor; standard consumer rights and opt-in for sensitive data.
❄️
Minnesota
MNDPA
βœ… Active
Effective: July 31, 2025
Includes data broker registration requirements; broad consumer rights and plain-language privacy notice requirements.
πŸ¦€
Maryland
MODPA
βœ… Active
Effective: Oct 1, 2025
Strong data minimization requirements; prohibits targeted ads to minors; low 35K threshold. One of the most progressive new laws.
🏁
Indiana
INCDPA
βœ… Active
Effective: Jan 1, 2026
Indiana Consumer Data Protection Act β€” Virginia-model law with full consumer rights and opt-in for sensitive data categories.
πŸ‡
Kentucky
KCDPA
βœ… Active
Effective: Jan 1, 2026
Kentucky Consumer Data Protection Act β€” close alignment with Virginia CDPA; full consumer rights suite and 30-day cure period.
βš“
Rhode Island
RIDPPA
βœ… Active
Effective: Jan 1, 2026
Rhode Island Data Transparency and Privacy Protection Act β€” emphasis on plain-language notices, 35K threshold, full rights.
πŸ‚
Vermont
Act 140
βœ… Active
Effective: Jan 1, 2025 (partial)
First state with data broker registration (2018); Act 140 adds full consumer privacy rights β€” unique two-track framework.

States with Pending or Proposed Laws

5+

States Without a Comprehensive Privacy Law

~23
🐘
Alabama
No comprehensive law
πŸ¦…
Alaska
No comprehensive law
πŸ‘
Georgia
No comprehensive law
🌺
Hawaii
No comprehensive law
πŸ₯”
Idaho
No comprehensive law
🎰
Louisiana
No comprehensive law
🦞
Maine
ISP data only
πŸš—
Michigan
No comprehensive law
🎺
Mississippi
No comprehensive law
πŸŒ‰
Missouri
No comprehensive law
🎲
Nevada
Opt-out of sale only
🌢️
New Mexico
No comprehensive law
πŸ”οΈ
North Carolina
No comprehensive law
🌾
North Dakota
No comprehensive law
🌻
Ohio
No comprehensive law
πŸ””
Pennsylvania
No comprehensive law
🌴
South Carolina
No comprehensive law
πŸŒ„
South Dakota
No comprehensive law
πŸ”οΈ
West Virginia
No comprehensive law
πŸ§€
Wisconsin
No comprehensive law
🀠
Wyoming
No comprehensive law
πŸ’Ž
Arkansas
No comprehensive law
🦞
Massachusetts
No comprehensive law (bills active)

No states found

Try a different search term or filter.