On March 24, Virginia Governor Glenn Youngkin signed into law SB 754 (Act), which amends the Virginia Consumer Protection Act (VCPA) to prohibit entities from collecting, disclosing, selling, or disseminating reproductive or...more
On May 8, Montana Governor Greg Gianforte signed into law Senate Bill 297 (SB 297), a bill that significantly revises the existing Montana Consumer Data Privacy Act (MCDPA). Although the MCDPA took effect on October 1, 2024,...more
5/16/2025
/ Consumer Privacy Rights ,
Data Privacy ,
Enforcement ,
Legislative Agendas ,
Minors ,
Montana ,
New Legislation ,
Personal Data ,
Privacy Laws ,
Regulatory Requirements ,
State Privacy Laws
On April 4, Kentucky Governor Andy Beshear signed the Kentucky Consumer Data Protection Act (KCDPA) into law, making Kentucky the sixteenth state to enact comprehensive data privacy legislation and the third state to do so in...more
4/16/2024
/ Biometric Information ,
Consumer Privacy Rights ,
COPPA ,
Data Privacy ,
Enforcement ,
Exemptions ,
Fair Credit Reporting Act (FCRA) ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Personally Identifiable Information ,
State Privacy Laws
Washington’s My Health My Data Act (MHMDA) was enacted in an effort to close a perceived gap in privacy protection for consumer health data. MHMDA’s focus on consumer health data and right of private action deviate from...more
2/5/2024
/ Consent Agreements ,
Data Collection ,
Data Selling ,
Data-Sharing ,
Enforcement ,
Families First Coronavirus Response Act (FFCRA) ,
FERPA ,
Gramm-Leach-Blilely Act ,
Health Insurance Portability and Accountability Act (HIPAA) ,
Healthcare ,
Mental Health ,
PHI ,
Privacy Laws ,
Small Business ,
Summary of Consumer Rights
Oregon Governor Tina Kotek signed into law the Oregon Consumer Privacy Act (OCPA) (Senate Bill 619) on July 18, making Oregon the twelfth state to enact comprehensive data privacy legislation. The OCPA is primarily based on...more
8/16/2023
/ Consumer Privacy Rights ,
Consumers ,
Data Protection ,
Enforcement ,
Exemptions ,
Legislative Agendas ,
New Legislation ,
Oregon ,
Personal Data ,
Privacy Laws ,
State and Local Government ,
State Legislatures ,
State Privacy Laws
On June 18, Texas became the eleventh state to enact a comprehensive consumer privacy law by passing the Texas Data Privacy and Security Act (TDPSA) (HB 4). The TDPSA will take effect on July 1, 2024, which is the same day as...more
6/23/2023
/ Consumer Privacy Rights ,
Consumer Protection Laws ,
Data Collection ,
Data Controller ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Data Use Policies ,
Enforcement ,
Opt-In ,
Opt-Outs ,
Right To Cure ,
State Attorneys General ,
State Privacy Laws
Following closely behind Iowa’s new privacy law, on April 20, Indiana passed its consumer privacy act (SB 5) (Privacy Act), making the state the seventh to adopt what is generally considered a comprehensive consumer privacy...more
4/27/2023
/ Consumer Privacy Rights ,
Data Collection ,
Data Privacy ,
Data Protection ,
Data Protection Acts ,
Data Security ,
Enforcement ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws
On March 28, Iowa Governor Kim Reynolds signed into law an Iowa consumer privacy act (SF 262), making the state the sixth to adopt what is generally considered a comprehensive consumer privacy law. The law takes effect on...more
The Connecticut Data Privacy Act (CTDPA) was signed into law on May 10, by Connecticut Governor Ned Lamont, making Connecticut the fifth state to enact a consumer privacy law. The CTDPA is set to take effect on July 1, 2023,...more
5/18/2022
/ Connecticut ,
Consumer Privacy Rights ,
Covered Entities ,
Data Collection ,
Data Privacy ,
Enforcement ,
Governor Lamont ,
Healthcare ,
Intellectual Property Protection ,
Legislative Agendas ,
New Legislation ,
Opt-Outs ,
Personal Data ,
Privacy Acts ,
Privacy Laws ,
State Privacy Laws