---
title: "US state privacy laws: all 23 comprehensive laws compared"
canonical: "https://dposchool.com/state-privacy-laws"
source:
  - "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?lawCode=CIV&division=3.&part=4.&title=1.81.5."
  - "https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/"
  - "https://leg.colorado.gov/sites/default/files/images/olls/crs2024-title-06.pdf"
  - "https://www.cga.ct.gov/current/pub/chap_743jj.htm"
  - "https://le.utah.gov/xcode/Title13/Chapter61/13-61.html"
  - "https://www.oregonlegislature.gov/bills_laws/ors/ors646A.html"
  - "https://statutes.capitol.texas.gov/Docs/BC/htm/BC.541.htm"
  - "https://archive.legmt.gov/bills/mca/title_0300/chapter_0140/part_0280/sections_index.html"
  - "https://delcode.delaware.gov/title6/c012d/index.html"
  - "https://www.legis.iowa.gov/docs/code/715D.pdf"
  - "https://nebraskalegislature.gov/laws/statutes.php?statute=87-1101"
  - "https://gc.nh.gov/rsa/html/LII/507-H/507-H-mrg.htm"
  - "https://pub.njleg.state.nj.us/Bills/2022/PL23/266_.HTM"
  - "https://publications.tnsosfiles.com/acts/113/pub/pc0408.pdf"
  - "https://www.revisor.mn.gov/statutes/cite/325M.10"
  - "https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl&section=14-4701&enactments=false"
  - "https://iga.in.gov/ic/2026/Title_24.pdf"
  - "https://apps.legislature.ky.gov/law/statutes/chapter.aspx?id=39092"
  - "https://webserver.rilegislature.gov/Statutes/TITLE6/6-48.1/INDEX.htm"
  - "https://legis.la.gov/legis/ViewDocument.aspx?d=1480202"
  - "https://www.oklegislature.gov/cf_pdf/2025-26%20ENR/SB/SB546%20ENR.pdf"
  - "https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/HB351-enr.pdf"
  - "https://legislature.vermont.gov/Documents/2026/Docs/ACTS/ACT145/ACT145%20As%20Enacted.pdf"
  - "http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html"
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en-US"
publisher: "DPO School"
---

# US State Privacy Laws

The 23 comprehensive US state consumer privacy laws, state by state and topic by topic. Every statement names its statute section and links to the official text.

Law as of October 28, 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review)

Reference material, not legal advice. [About this navigator](https://dposchool.com/state-privacy-laws/about)

## Compare state privacy laws by topic

- [Applicability](https://dposchool.com/state-privacy-laws/topic/applicability): Who the law applies to: thresholds, exemptions and nonprofits.
- [Consumer rights](https://dposchool.com/state-privacy-laws/topic/consumer-rights): The rights consumers have, response deadlines and appeals.
- [Sensitive data](https://dposchool.com/state-privacy-laws/topic/sensitive-data): How sensitive data and children's and teens' data are treated.
- [Controller duties](https://dposchool.com/state-privacy-laws/topic/controller-duties): Notices, opt-out signals, data protection assessments and minimization.
- [Processors](https://dposchool.com/state-privacy-laws/topic/processors): What processors must do and what the contract with them must say.
- [Enforcement](https://dposchool.com/state-privacy-laws/topic/enforcement): Who enforces the law, cure periods, penalties and private actions.

## Comprehensive state privacy laws

In order of entry into force. Laws enacted but not yet in force show the date they take effect.

| State | Law | Citation | In force | Official text |
| --- | --- | --- | --- | --- |
| [California](https://dposchool.com/state-privacy-laws/state/california) | California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act, Proposition 24) | Cal. Civ. Code §§ 1798.100 to 1798.199.100; Cal. Code Regs. tit. 11, § 7000 et seq. | January 1, 2020 | [Statute](https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?lawCode=CIV&division=3.&part=4.&title=1.81.5.) |
| [Virginia](https://dposchool.com/state-privacy-laws/state/virginia) | Virginia Consumer Data Protection Act | Va. Code Ann. §§ 59.1-575 to 59.1-584 | January 1, 2023 | [Statute](https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/) |
| [Colorado](https://dposchool.com/state-privacy-laws/state/colorado) | Colorado Privacy Act | C.R.S. §§ 6-1-1301 to 6-1-1314 | July 1, 2023 | [Statute](https://leg.colorado.gov/sites/default/files/images/olls/crs2024-title-06.pdf) |
| [Connecticut](https://dposchool.com/state-privacy-laws/state/connecticut) | Connecticut Data Privacy Act (An Act Concerning Personal Data Privacy and Online Monitoring) | Conn. Gen. Stat. §§ 42-515 to 42-526 (minors: §§ 42-529 to 42-529e) | July 1, 2023 | [Statute](https://www.cga.ct.gov/current/pub/chap_743jj.htm) |
| [Utah](https://dposchool.com/state-privacy-laws/state/utah) | Utah Consumer Privacy Act | Utah Code §§ 13-61-101 to 13-61-404 (Part 5, §§ 13-61-501 to 13-61-504, from 1 January 2027) | December 31, 2023 | [Statute](https://le.utah.gov/xcode/Title13/Chapter61/13-61.html) |
| [Oregon](https://dposchool.com/state-privacy-laws/state/oregon) | Oregon Consumer Privacy Act | ORS 646A.570 to 646A.589 | July 1, 2024 | [Statute](https://www.oregonlegislature.gov/bills_laws/ors/ors646A.html) |
| [Texas](https://dposchool.com/state-privacy-laws/state/texas) | Texas Data Privacy and Security Act | Tex. Bus. & Com. Code §§ 541.001 to 541.205 | July 1, 2024 | [Statute](https://statutes.capitol.texas.gov/Docs/BC/htm/BC.541.htm) |
| [Montana](https://dposchool.com/state-privacy-laws/state/montana) | Montana Consumer Data Privacy Act | Mont. Code Ann. §§ 30-14-2801 to 30-14-2820 | October 1, 2024 | [Statute](https://archive.legmt.gov/bills/mca/title_0300/chapter_0140/part_0280/sections_index.html) |
| [Delaware](https://dposchool.com/state-privacy-laws/state/delaware) | Delaware Personal Data Privacy Act | Del. Code Ann. tit. 6, §§ 12D-101 to 12D-111 | January 1, 2025 | [Statute](https://delcode.delaware.gov/title6/c012d/index.html) |
| [Iowa](https://dposchool.com/state-privacy-laws/state/iowa) | Iowa Consumer Data Protection Act (Iowa Code chapter 715D) | Iowa Code §§ 715D.1 to 715D.9 | January 1, 2025 | [Statute](https://www.legis.iowa.gov/docs/code/715D.pdf) |
| [Nebraska](https://dposchool.com/state-privacy-laws/state/nebraska) | Nebraska Data Privacy Act | Neb. Rev. Stat. §§ 87-1101 to 87-1130 | January 1, 2025 | [Statute](https://nebraskalegislature.gov/laws/statutes.php?statute=87-1101) |
| [New Hampshire](https://dposchool.com/state-privacy-laws/state/new-hampshire) | New Hampshire Expectation of Privacy Act (RSA chapter 507-H) | N.H. Rev. Stat. Ann. §§ 507-H:1 to 507-H:12 | January 1, 2025 | [Statute](https://gc.nh.gov/rsa/html/LII/507-H/507-H-mrg.htm) |
| [New Jersey](https://dposchool.com/state-privacy-laws/state/new-jersey) | New Jersey Data Privacy Act | N.J.S.A. 56:8-166.4 to 56:8-166.19 (P.L.2023, c.266), with N.J.S.A. 56:8-166.20 to 56:8-166.24 (P.L.2026, c.25) | January 15, 2025 | [Statute](https://pub.njleg.state.nj.us/Bills/2022/PL23/266_.HTM) |
| [Tennessee](https://dposchool.com/state-privacy-laws/state/tennessee) | Tennessee Information Protection Act | Tenn. Code Ann. §§ 47-18-3301 to 47-18-3314 | July 1, 2025 | [Statute](https://publications.tnsosfiles.com/acts/113/pub/pc0408.pdf) |
| [Minnesota](https://dposchool.com/state-privacy-laws/state/minnesota) | Minnesota Consumer Data Privacy Act | Minn. Stat. §§ 325M.10 to 325M.21 | July 31, 2025 | [Statute](https://www.revisor.mn.gov/statutes/cite/325M.10) |
| [Maryland](https://dposchool.com/state-privacy-laws/state/maryland) | Maryland Online Data Privacy Act | Md. Code Ann., Com. Law §§ 14-4701 to 14-4714 (enacted as §§ 14-4601 to 14-4614) | October 1, 2025 | [Statute](https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl&section=14-4701&enactments=false) |
| [Indiana](https://dposchool.com/state-privacy-laws/state/indiana) | Indiana Consumer Data Protection Act | Ind. Code §§ 24-15-1-1 to 24-15-11-2 | January 1, 2026 | [Statute](https://iga.in.gov/ic/2026/Title_24.pdf) |
| [Kentucky](https://dposchool.com/state-privacy-laws/state/kentucky) | Kentucky Consumer Data Protection Act | KRS 367.3611 to 367.3629 | January 1, 2026 | [Statute](https://apps.legislature.ky.gov/law/statutes/chapter.aspx?id=39092) |
| [Rhode Island](https://dposchool.com/state-privacy-laws/state/rhode-island) | Rhode Island Data Transparency and Privacy Protection Act | R.I. Gen. Laws §§ 6-48.1-1 to 6-48.1-10 | January 1, 2026 | [Statute](https://webserver.rilegislature.gov/Statutes/TITLE6/6-48.1/INDEX.htm) |
| [Louisiana](https://dposchool.com/state-privacy-laws/state/louisiana) | Louisiana Data Privacy Act | La. R.S. 51:1780.1 to 1780.5 (Chapter 20-B of Title 51, enacted by Act No. 502 of the 2026 Regular Session) | Enacted, in force January 1, 2027 | [Statute](https://legis.la.gov/legis/ViewDocument.aspx?d=1480202) |
| [Oklahoma](https://dposchool.com/state-privacy-laws/state/oklahoma) | Oklahoma consumer data privacy act (Enrolled Senate Bill 546; the act gives itself no short title) | Okla. Stat. tit. 75A, §§ 300 to 320 (to be codified by SB 546 (2026), Secs. 1 to 21) | Enacted, in force January 1, 2027 | [Statute](https://www.oklegislature.gov/cf_pdf/2025-26%20ENR/SB/SB546%20ENR.pdf) |
| [Alabama](https://dposchool.com/state-privacy-laws/state/alabama) | Alabama Personal Data Protection Act | Ala. Code §§ 8-44-1 to 8-44-11 (Act 2026-552, §§ 1 to 11) | Enacted, in force May 1, 2027 | [Statute](https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/HB351-enr.pdf) |
| [Vermont](https://dposchool.com/state-privacy-laws/state/vermont) | Vermont Data Privacy and Online Surveillance Act | 9 V.S.A. §§ 2415a to 2415k (9 V.S.A. chapter 61A, subchapter 1, added by 2026 Act 145, Sec. 1) | Enacted, in force January 1, 2028 | [Statute](https://legislature.vermont.gov/Documents/2026/Docs/ACTS/ACT145/ACT145%20As%20Enacted.pdf) |

## Narrower laws

Laws that are narrower in scope than the comprehensive laws. See each law's applicability page.

| State | Law | Citation | In force | Official text |
| --- | --- | --- | --- | --- |
| [Florida](https://dposchool.com/state-privacy-laws/state/florida) | Florida Digital Bill of Rights | Fla. Stat. §§ 501.701 to 501.722 (ch. 501, part V) | July 1, 2024 | [Statute](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html) |

Learning US privacy law? An audio course on the privacy law that applies to US businesses: [US Privacy in Practice](https://dposchool.com/learn/courses/us-privacy-in-practice). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/state-privacy-laws/llms.txt
- JSON API: https://dposchool.com/state-privacy-laws/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents