On June 23, significant amendments (Amendments) to the Children’s Online Privacy Protection Act (COPPA) Rule (COPPA Rule) became effective, which increase obligations on many operators of websites and online services. The...more
8/1/2025
/ Compliance ,
COPPA ,
Data Collection ,
Data Privacy ,
Data Security ,
Deadlines ,
Disclosure Requirements ,
Federal Trade Commission (FTC) ,
Legislative Agendas ,
New Legislation ,
Parental Consent ,
Privacy Laws ,
Regulatory Requirements
On May 8, Montana Governor Greg Gianforte signed into law Senate Bill 297 (SB 297), a bill that significantly revises the existing Montana Consumer Data Privacy Act (MCDPA). Although the MCDPA took effect on October 1, 2024,...more
5/16/2025
/ Consumer Privacy Rights ,
Data Privacy ,
Enforcement ,
Legislative Agendas ,
Minors ,
Montana ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
On April 8, the U.S. Department of Justice’s (DOJ) Final Rule, codified at 28 CFR Part 202, (Final Rule), implementing President Biden’s Executive Order 14117 “Preventing Access to U.S. Sensitive Personal Data and...more
5/8/2025
/ Biden Administration ,
CFIUS ,
China ,
Data Privacy ,
Data Protection ,
Department of Justice (DOJ) ,
Executive Orders ,
Final Rules ,
International Data Transfers ,
National Security ,
Regulatory Agenda ,
Regulatory Requirements
States continued to pass comprehensive consumer privacy laws throughout 2024. 2025 brings eight new state-level comprehensive consumer privacy laws into effect. As with the five state privacy laws that went into effect in...more
On June 28, the Rhode Island Data Transparency and Privacy Protection Act (DTPPA) was enacted without Governor Dan McKee’s signature, making Rhode Island the twentieth state to enact comprehensive consumer data privacy...more
7/18/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Privacy Laws
The list of U.S. state-level data privacy laws will grow substantially this summer as three more comprehensive state laws become effective. Texas, Oregon and Florida each have a comprehensive data privacy law taking effect on...more
5/7/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
Sensitive Personal Information ,
Small Business ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On April 17, Nebraska Governor Jim Pillen signed into law the Nebraska Data Privacy Act (the Act), making Nebraska the seventeenth state to enact general consumer data privacy legislation. The Act largely, but not completely,...more
On April 4, Kentucky Governor Andy Beshear signed the Kentucky Consumer Data Protection Act (KCDPA) into law, making Kentucky the sixteenth state to enact comprehensive data privacy legislation and the third state to do so in...more
4/16/2024
/ Biometric Information ,
Consumer Privacy Rights ,
COPPA ,
Data Privacy ,
Enforcement ,
Exemptions ,
Fair Credit Reporting Act (FCRA) ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personally Identifiable Information ,
State Privacy Laws
As of March 31, 2024, Nevada’s state consumer health data law, Senate Bill No. 370 (SB 370), enters the state-level consumer health data privacy fray. Similar to Washington’s My Health My Data Act (MHMDA), SB 370 focuses on...more
3/21/2024
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Healthcare ,
New Regulations ,
Personal Data ,
Personal Information ,
Privacy Laws ,
State and Local Government ,
State Privacy Laws
On March 6, New Hampshire joined the growing list of states that have enacted a comprehensive consumer privacy statute when Governor Chris Sununu signed into law Senate Bill 255 (the Act). Generally, the Act follows the...more
3/15/2024
/ Consumer Privacy Rights ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Legislative Agendas ,
New Legislation ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
Privacy Policy ,
Regulatory Requirements ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
State-level privacy laws in the United States continue to develop at a dizzying pace and it is understandably difficult to keep track of what takes effect when. Below we’ve outlined the statutes and regulations taking effect...more
1/30/2024
/ Consumer Privacy Rights ,
Corporate Counsel ,
Data Collection ,
Data Privacy ,
Data Protection ,
Healthcare ,
New Regulations ,
Opt-Outs ,
Personal Data ,
Personal Information ,
Privacy Laws ,
State and Local Government ,
State Privacy Laws
The Indian Central Government (Central Government) enacted a broad and significant privacy law, the Digital Personal Data Protection Act (the DPDP), on August 11. The DPDP, when effective (as per dates to be notified by the...more
On September 11, Delaware Governor John Carney signed into law the Delaware Personal Data Privacy Act (DPDPA) (House Bill 154), making Delaware the thirteenth state to enact a comprehensive data privacy framework. The DPDPA...more
On June 18, Texas became the eleventh state to enact a comprehensive consumer privacy law by passing the Texas Data Privacy and Security Act (TDPSA) (HB 4). The TDPSA will take effect on July 1, 2024, which is the same day as...more
6/23/2023
/ Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Data Use Policies ,
Enforcement ,
Opt-In ,
Opt-Outs ,
Right To Cure ,
State Attorneys General ,
State Privacy Laws
On June 6, Florida Governor Ron DeSantis approved the passage of Senate Bill 262, which establishes the Florida Digital Bill of Rights (FDBR), set to go into effect July 1, 2024. Florida is now the tenth state to pass...more
6/13/2023
/ Consent ,
Consumer Privacy Rights ,
Covered Entities ,
Data Collection ,
Data Privacy ,
Enforcement Actions ,
Florida ,
Online Safety for Children ,
Opt-In ,
Opt-Outs ,
Personal Data ,
Privacy Laws ,
Social Media ,
State and Local Government
On April 21, the Montana legislature unanimously passed the Montana Consumer Data Privacy Act (MCDPA) (SB 384), joining several states with general consumer data privacy bills. The MCDPA most closely aligns with the...more
Following closely behind Iowa’s new privacy law, on April 20, Indiana passed its consumer privacy act (SB 5) (Privacy Act), making the state the seventh to adopt what is generally considered a comprehensive consumer privacy...more
4/27/2023
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Enforcement ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws
On June 3, 2022, a bipartisan group of U.S. Representatives released a discussion draft of a comprehensive federal data privacy bill entitled the American Data Privacy and Protection Act (ADPPA). Though bipartisan compromise...more
6/22/2022
/ Consumer Privacy Rights ,
Covered Entities ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Security ,
Data Transfers ,
Preemption ,
Privacy Laws ,
Private Right of Action ,
Proposed Legislation ,
State Privacy Laws
The Connecticut Data Privacy Act (CTDPA) was signed into law on May 10, by Connecticut Governor Ned Lamont, making Connecticut the fifth state to enact a consumer privacy law. The CTDPA is set to take effect on July 1, 2023,...more
5/18/2022
/ Connecticut ,
Consumer Privacy Rights ,
Covered Entities ,
Data Collection ,
Data Privacy ,
Enforcement ,
Governor Lamont ,
Healthcare ,
Intellectual Property Protection ,
Legislative Agendas ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws