# US State Privacy Laws (DPO School) > The 23 comprehensive US state consumer privacy laws and the narrower Florida Digital Bill of Rights, state by state and topic by topic, each statement with its statute section and a link to the official text. Sources read on 2026-10-28 from the official legislature and agency sites. Reviewed by Sergio Maldonado Elvira on 29 October 2026. Reference material, not legal advice. ## Pages - [Home: every state law, citation and in-force date](https://dposchool.com/state-privacy-laws) - [About and method: sources, review and reviewer](https://dposchool.com/state-privacy-laws/about) - States: https://dposchool.com/state-privacy-laws/state/{slug}, e.g. [Texas](https://dposchool.com/state-privacy-laws/state/texas) - State topics: https://dposchool.com/state-privacy-laws/state/{slug}/{topic}, e.g. [Texas, consumer rights](https://dposchool.com/state-privacy-laws/state/texas/consumer-rights) - Topic comparisons across all states: https://dposchool.com/state-privacy-laws/topic/{topic} - Topics: applicability, consumer-rights, sensitive-data, controller-duties, processors, enforcement ## JSON (static, no key needed) - [Index](https://dposchool.com/state-privacy-laws/api/v1/index.json): every law with citation, dates, page and JSON address - State: https://dposchool.com/state-privacy-laws/api/v1/states/{postal code}.json, e.g. [Texas](https://dposchool.com/state-privacy-laws/api/v1/states/tx.json) - State topic: https://dposchool.com/state-privacy-laws/api/v1/states/{postal code}/{topic}.json, e.g. [Texas, consumer rights](https://dposchool.com/state-privacy-laws/api/v1/states/tx/consumer-rights.json) - Topic comparison: https://dposchool.com/state-privacy-laws/api/v1/topics/{topic}.json, e.g. [Enforcement](https://dposchool.com/state-privacy-laws/api/v1/topics/enforcement.json) ## Comparisons - [Applicability](https://dposchool.com/state-privacy-laws/topic/applicability): Who the law applies to: thresholds, exemptions and nonprofits. - [Consumer rights](https://dposchool.com/state-privacy-laws/topic/consumer-rights): The rights consumers have, response deadlines and appeals. - [Sensitive data](https://dposchool.com/state-privacy-laws/topic/sensitive-data): How sensitive data and children's and teens' data are treated. - [Controller duties](https://dposchool.com/state-privacy-laws/topic/controller-duties): Notices, opt-out signals, data protection assessments and minimization. - [Processors](https://dposchool.com/state-privacy-laws/topic/processors): What processors must do and what the contract with them must say. - [Enforcement](https://dposchool.com/state-privacy-laws/topic/enforcement): Who enforces the law, cure periods, penalties and private actions. ## States - [California: California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act, Proposition 24)](https://dposchool.com/state-privacy-laws/state/california), Cal. Civ. Code §§ 1798.100 to 1798.199.100; Cal. Code Regs. tit. 11, § 7000 et seq. - [Virginia: Virginia Consumer Data Protection Act](https://dposchool.com/state-privacy-laws/state/virginia), Va. Code Ann. §§ 59.1-575 to 59.1-584 - [Colorado: Colorado Privacy Act](https://dposchool.com/state-privacy-laws/state/colorado), C.R.S. §§ 6-1-1301 to 6-1-1314 - [Connecticut: Connecticut Data Privacy Act (An Act Concerning Personal Data Privacy and Online Monitoring)](https://dposchool.com/state-privacy-laws/state/connecticut), Conn. Gen. Stat. §§ 42-515 to 42-526 (minors: §§ 42-529 to 42-529e) - [Utah: Utah Consumer Privacy Act](https://dposchool.com/state-privacy-laws/state/utah), Utah Code §§ 13-61-101 to 13-61-404 (Part 5, §§ 13-61-501 to 13-61-504, from 1 January 2027) - [Oregon: Oregon Consumer Privacy Act](https://dposchool.com/state-privacy-laws/state/oregon), ORS 646A.570 to 646A.589 - [Texas: Texas Data Privacy and Security Act](https://dposchool.com/state-privacy-laws/state/texas), Tex. Bus. & Com. Code §§ 541.001 to 541.205 - [Montana: Montana Consumer Data Privacy Act](https://dposchool.com/state-privacy-laws/state/montana), Mont. Code Ann. §§ 30-14-2801 to 30-14-2820 - [Delaware: Delaware Personal Data Privacy Act](https://dposchool.com/state-privacy-laws/state/delaware), Del. Code Ann. tit. 6, §§ 12D-101 to 12D-111 - [Iowa: Iowa Consumer Data Protection Act (Iowa Code chapter 715D)](https://dposchool.com/state-privacy-laws/state/iowa), Iowa Code §§ 715D.1 to 715D.9 - [Nebraska: Nebraska Data Privacy Act](https://dposchool.com/state-privacy-laws/state/nebraska), Neb. Rev. Stat. §§ 87-1101 to 87-1130 - [New Hampshire: New Hampshire Expectation of Privacy Act (RSA chapter 507-H)](https://dposchool.com/state-privacy-laws/state/new-hampshire), N.H. Rev. Stat. Ann. §§ 507-H:1 to 507-H:12 - [New Jersey: New Jersey Data Privacy Act](https://dposchool.com/state-privacy-laws/state/new-jersey), N.J.S.A. 56:8-166.4 to 56:8-166.19 (P.L.2023, c.266), with N.J.S.A. 56:8-166.20 to 56:8-166.24 (P.L.2026, c.25) - [Tennessee: Tennessee Information Protection Act](https://dposchool.com/state-privacy-laws/state/tennessee), Tenn. Code Ann. §§ 47-18-3301 to 47-18-3314 - [Minnesota: Minnesota Consumer Data Privacy Act](https://dposchool.com/state-privacy-laws/state/minnesota), Minn. Stat. §§ 325M.10 to 325M.21 - [Maryland: Maryland Online Data Privacy Act](https://dposchool.com/state-privacy-laws/state/maryland), Md. Code Ann., Com. Law §§ 14-4701 to 14-4714 (enacted as §§ 14-4601 to 14-4614) - [Indiana: Indiana Consumer Data Protection Act](https://dposchool.com/state-privacy-laws/state/indiana), Ind. Code §§ 24-15-1-1 to 24-15-11-2 - [Kentucky: Kentucky Consumer Data Protection Act](https://dposchool.com/state-privacy-laws/state/kentucky), KRS 367.3611 to 367.3629 - [Rhode Island: Rhode Island Data Transparency and Privacy Protection Act](https://dposchool.com/state-privacy-laws/state/rhode-island), R.I. Gen. Laws §§ 6-48.1-1 to 6-48.1-10 - [Louisiana: Louisiana Data Privacy Act](https://dposchool.com/state-privacy-laws/state/louisiana), La. R.S. 51:1780.1 to 1780.5 (Chapter 20-B of Title 51, enacted by Act No. 502 of the 2026 Regular Session) - [Oklahoma: Oklahoma consumer data privacy act (Enrolled Senate Bill 546; the act gives itself no short title)](https://dposchool.com/state-privacy-laws/state/oklahoma), Okla. Stat. tit. 75A, §§ 300 to 320 (to be codified by SB 546 (2026), Secs. 1 to 21) - [Alabama: Alabama Personal Data Protection Act](https://dposchool.com/state-privacy-laws/state/alabama), Ala. Code §§ 8-44-1 to 8-44-11 (Act 2026-552, §§ 1 to 11) - [Vermont: Vermont Data Privacy and Online Surveillance Act](https://dposchool.com/state-privacy-laws/state/vermont), 9 V.S.A. §§ 2415a to 2415k (9 V.S.A. chapter 61A, subchapter 1, added by 2026 Act 145, Sec. 1) - [Florida: Florida Digital Bill of Rights](https://dposchool.com/state-privacy-laws/state/florida), Fla. Stat. §§ 501.701 to 501.722 (ch. 501, part V) ## Markdown (one file per page) - Every page with text has a Markdown twin: its address plus ".md", e.g. https://dposchool.com/state-privacy-laws/state/texas.md; the home page is https://dposchool.com/state-privacy-laws/index.md. Each file has YAML front matter (title, canonical, source, text_as_of, last_reviewed, language, publisher), the content as on the page, and the page's links as absolute URLs. - [Home: every state law, citation and in-force date](https://dposchool.com/state-privacy-laws/index.md) - [Compare: Applicability](https://dposchool.com/state-privacy-laws/topic/applicability.md) - [Compare: Consumer rights](https://dposchool.com/state-privacy-laws/topic/consumer-rights.md) - [Compare: Sensitive data](https://dposchool.com/state-privacy-laws/topic/sensitive-data.md) - [Compare: Controller duties](https://dposchool.com/state-privacy-laws/topic/controller-duties.md) - [Compare: Processors](https://dposchool.com/state-privacy-laws/topic/processors.md) - [Compare: Enforcement](https://dposchool.com/state-privacy-laws/topic/enforcement.md) - [California: overview](https://dposchool.com/state-privacy-laws/state/california.md) - [Virginia: overview](https://dposchool.com/state-privacy-laws/state/virginia.md) - [Colorado: overview](https://dposchool.com/state-privacy-laws/state/colorado.md) - [Connecticut: overview](https://dposchool.com/state-privacy-laws/state/connecticut.md) - [Utah: overview](https://dposchool.com/state-privacy-laws/state/utah.md) - [Oregon: overview](https://dposchool.com/state-privacy-laws/state/oregon.md) - [Texas: overview](https://dposchool.com/state-privacy-laws/state/texas.md) - [Montana: overview](https://dposchool.com/state-privacy-laws/state/montana.md) - [Delaware: overview](https://dposchool.com/state-privacy-laws/state/delaware.md) - [Iowa: overview](https://dposchool.com/state-privacy-laws/state/iowa.md) - [Nebraska: overview](https://dposchool.com/state-privacy-laws/state/nebraska.md) - [New Hampshire: overview](https://dposchool.com/state-privacy-laws/state/new-hampshire.md) - [New Jersey: overview](https://dposchool.com/state-privacy-laws/state/new-jersey.md) - [Tennessee: overview](https://dposchool.com/state-privacy-laws/state/tennessee.md) - [Minnesota: overview](https://dposchool.com/state-privacy-laws/state/minnesota.md) - [Maryland: overview](https://dposchool.com/state-privacy-laws/state/maryland.md) - [Indiana: overview](https://dposchool.com/state-privacy-laws/state/indiana.md) - [Kentucky: overview](https://dposchool.com/state-privacy-laws/state/kentucky.md) - [Rhode Island: overview](https://dposchool.com/state-privacy-laws/state/rhode-island.md) - [Louisiana: overview](https://dposchool.com/state-privacy-laws/state/louisiana.md) - [Oklahoma: overview](https://dposchool.com/state-privacy-laws/state/oklahoma.md) - [Alabama: overview](https://dposchool.com/state-privacy-laws/state/alabama.md) - [Vermont: overview](https://dposchool.com/state-privacy-laws/state/vermont.md) - [Florida: overview](https://dposchool.com/state-privacy-laws/state/florida.md) ## Markdown: state topics - [California: applicability](https://dposchool.com/state-privacy-laws/state/california/applicability.md) - [California: consumer rights](https://dposchool.com/state-privacy-laws/state/california/consumer-rights.md) - [California: sensitive data](https://dposchool.com/state-privacy-laws/state/california/sensitive-data.md) - [California: controller duties](https://dposchool.com/state-privacy-laws/state/california/controller-duties.md) - [California: processors](https://dposchool.com/state-privacy-laws/state/california/processors.md) - [California: enforcement](https://dposchool.com/state-privacy-laws/state/california/enforcement.md) - [Virginia: applicability](https://dposchool.com/state-privacy-laws/state/virginia/applicability.md) - [Virginia: consumer rights](https://dposchool.com/state-privacy-laws/state/virginia/consumer-rights.md) - [Virginia: sensitive data](https://dposchool.com/state-privacy-laws/state/virginia/sensitive-data.md) - [Virginia: controller duties](https://dposchool.com/state-privacy-laws/state/virginia/controller-duties.md) - [Virginia: processors](https://dposchool.com/state-privacy-laws/state/virginia/processors.md) - [Virginia: enforcement](https://dposchool.com/state-privacy-laws/state/virginia/enforcement.md) - [Colorado: applicability](https://dposchool.com/state-privacy-laws/state/colorado/applicability.md) - [Colorado: consumer rights](https://dposchool.com/state-privacy-laws/state/colorado/consumer-rights.md) - [Colorado: sensitive data](https://dposchool.com/state-privacy-laws/state/colorado/sensitive-data.md) - [Colorado: controller duties](https://dposchool.com/state-privacy-laws/state/colorado/controller-duties.md) - [Colorado: processors](https://dposchool.com/state-privacy-laws/state/colorado/processors.md) - [Colorado: enforcement](https://dposchool.com/state-privacy-laws/state/colorado/enforcement.md) - [Connecticut: applicability](https://dposchool.com/state-privacy-laws/state/connecticut/applicability.md) - [Connecticut: consumer rights](https://dposchool.com/state-privacy-laws/state/connecticut/consumer-rights.md) - [Connecticut: sensitive data](https://dposchool.com/state-privacy-laws/state/connecticut/sensitive-data.md) - [Connecticut: controller duties](https://dposchool.com/state-privacy-laws/state/connecticut/controller-duties.md) - [Connecticut: processors](https://dposchool.com/state-privacy-laws/state/connecticut/processors.md) - [Connecticut: enforcement](https://dposchool.com/state-privacy-laws/state/connecticut/enforcement.md) - [Utah: applicability](https://dposchool.com/state-privacy-laws/state/utah/applicability.md) - [Utah: consumer rights](https://dposchool.com/state-privacy-laws/state/utah/consumer-rights.md) - [Utah: sensitive data](https://dposchool.com/state-privacy-laws/state/utah/sensitive-data.md) - [Utah: controller duties](https://dposchool.com/state-privacy-laws/state/utah/controller-duties.md) - [Utah: processors](https://dposchool.com/state-privacy-laws/state/utah/processors.md) - [Utah: enforcement](https://dposchool.com/state-privacy-laws/state/utah/enforcement.md) - [Oregon: applicability](https://dposchool.com/state-privacy-laws/state/oregon/applicability.md) - [Oregon: consumer rights](https://dposchool.com/state-privacy-laws/state/oregon/consumer-rights.md) - [Oregon: sensitive data](https://dposchool.com/state-privacy-laws/state/oregon/sensitive-data.md) - [Oregon: controller duties](https://dposchool.com/state-privacy-laws/state/oregon/controller-duties.md) - [Oregon: processors](https://dposchool.com/state-privacy-laws/state/oregon/processors.md) - [Oregon: enforcement](https://dposchool.com/state-privacy-laws/state/oregon/enforcement.md) - [Texas: applicability](https://dposchool.com/state-privacy-laws/state/texas/applicability.md) - [Texas: consumer rights](https://dposchool.com/state-privacy-laws/state/texas/consumer-rights.md) - [Texas: sensitive data](https://dposchool.com/state-privacy-laws/state/texas/sensitive-data.md) - [Texas: controller duties](https://dposchool.com/state-privacy-laws/state/texas/controller-duties.md) - [Texas: processors](https://dposchool.com/state-privacy-laws/state/texas/processors.md) - [Texas: enforcement](https://dposchool.com/state-privacy-laws/state/texas/enforcement.md) - [Montana: applicability](https://dposchool.com/state-privacy-laws/state/montana/applicability.md) - [Montana: consumer rights](https://dposchool.com/state-privacy-laws/state/montana/consumer-rights.md) - [Montana: sensitive data](https://dposchool.com/state-privacy-laws/state/montana/sensitive-data.md) - [Montana: controller duties](https://dposchool.com/state-privacy-laws/state/montana/controller-duties.md) - [Montana: processors](https://dposchool.com/state-privacy-laws/state/montana/processors.md) - [Montana: enforcement](https://dposchool.com/state-privacy-laws/state/montana/enforcement.md) - [Delaware: applicability](https://dposchool.com/state-privacy-laws/state/delaware/applicability.md) - [Delaware: consumer rights](https://dposchool.com/state-privacy-laws/state/delaware/consumer-rights.md) - [Delaware: sensitive data](https://dposchool.com/state-privacy-laws/state/delaware/sensitive-data.md) - [Delaware: controller duties](https://dposchool.com/state-privacy-laws/state/delaware/controller-duties.md) - [Delaware: processors](https://dposchool.com/state-privacy-laws/state/delaware/processors.md) - [Delaware: enforcement](https://dposchool.com/state-privacy-laws/state/delaware/enforcement.md) - [Iowa: applicability](https://dposchool.com/state-privacy-laws/state/iowa/applicability.md) - [Iowa: consumer rights](https://dposchool.com/state-privacy-laws/state/iowa/consumer-rights.md) - [Iowa: sensitive data](https://dposchool.com/state-privacy-laws/state/iowa/sensitive-data.md) - [Iowa: controller duties](https://dposchool.com/state-privacy-laws/state/iowa/controller-duties.md) - [Iowa: processors](https://dposchool.com/state-privacy-laws/state/iowa/processors.md) - [Iowa: enforcement](https://dposchool.com/state-privacy-laws/state/iowa/enforcement.md) - [Nebraska: applicability](https://dposchool.com/state-privacy-laws/state/nebraska/applicability.md) - [Nebraska: consumer rights](https://dposchool.com/state-privacy-laws/state/nebraska/consumer-rights.md) - [Nebraska: sensitive data](https://dposchool.com/state-privacy-laws/state/nebraska/sensitive-data.md) - [Nebraska: controller duties](https://dposchool.com/state-privacy-laws/state/nebraska/controller-duties.md) - [Nebraska: processors](https://dposchool.com/state-privacy-laws/state/nebraska/processors.md) - [Nebraska: enforcement](https://dposchool.com/state-privacy-laws/state/nebraska/enforcement.md) - [New Hampshire: applicability](https://dposchool.com/state-privacy-laws/state/new-hampshire/applicability.md) - [New Hampshire: consumer rights](https://dposchool.com/state-privacy-laws/state/new-hampshire/consumer-rights.md) - [New Hampshire: sensitive data](https://dposchool.com/state-privacy-laws/state/new-hampshire/sensitive-data.md) - [New Hampshire: controller duties](https://dposchool.com/state-privacy-laws/state/new-hampshire/controller-duties.md) - [New Hampshire: processors](https://dposchool.com/state-privacy-laws/state/new-hampshire/processors.md) - [New Hampshire: enforcement](https://dposchool.com/state-privacy-laws/state/new-hampshire/enforcement.md) - [New Jersey: applicability](https://dposchool.com/state-privacy-laws/state/new-jersey/applicability.md) - [New Jersey: consumer rights](https://dposchool.com/state-privacy-laws/state/new-jersey/consumer-rights.md) - [New Jersey: sensitive data](https://dposchool.com/state-privacy-laws/state/new-jersey/sensitive-data.md) - [New Jersey: controller duties](https://dposchool.com/state-privacy-laws/state/new-jersey/controller-duties.md) - [New Jersey: processors](https://dposchool.com/state-privacy-laws/state/new-jersey/processors.md) - [New Jersey: enforcement](https://dposchool.com/state-privacy-laws/state/new-jersey/enforcement.md) - [Tennessee: applicability](https://dposchool.com/state-privacy-laws/state/tennessee/applicability.md) - [Tennessee: consumer rights](https://dposchool.com/state-privacy-laws/state/tennessee/consumer-rights.md) - [Tennessee: sensitive data](https://dposchool.com/state-privacy-laws/state/tennessee/sensitive-data.md) - [Tennessee: controller duties](https://dposchool.com/state-privacy-laws/state/tennessee/controller-duties.md) - [Tennessee: processors](https://dposchool.com/state-privacy-laws/state/tennessee/processors.md) - [Tennessee: enforcement](https://dposchool.com/state-privacy-laws/state/tennessee/enforcement.md) - [Minnesota: applicability](https://dposchool.com/state-privacy-laws/state/minnesota/applicability.md) - [Minnesota: consumer rights](https://dposchool.com/state-privacy-laws/state/minnesota/consumer-rights.md) - [Minnesota: sensitive data](https://dposchool.com/state-privacy-laws/state/minnesota/sensitive-data.md) - [Minnesota: controller duties](https://dposchool.com/state-privacy-laws/state/minnesota/controller-duties.md) - [Minnesota: processors](https://dposchool.com/state-privacy-laws/state/minnesota/processors.md) - [Minnesota: enforcement](https://dposchool.com/state-privacy-laws/state/minnesota/enforcement.md) - [Maryland: applicability](https://dposchool.com/state-privacy-laws/state/maryland/applicability.md) - [Maryland: consumer rights](https://dposchool.com/state-privacy-laws/state/maryland/consumer-rights.md) - [Maryland: sensitive data](https://dposchool.com/state-privacy-laws/state/maryland/sensitive-data.md) - [Maryland: controller duties](https://dposchool.com/state-privacy-laws/state/maryland/controller-duties.md) - [Maryland: processors](https://dposchool.com/state-privacy-laws/state/maryland/processors.md) - [Maryland: enforcement](https://dposchool.com/state-privacy-laws/state/maryland/enforcement.md) - [Indiana: applicability](https://dposchool.com/state-privacy-laws/state/indiana/applicability.md) - [Indiana: consumer rights](https://dposchool.com/state-privacy-laws/state/indiana/consumer-rights.md) - [Indiana: sensitive data](https://dposchool.com/state-privacy-laws/state/indiana/sensitive-data.md) - [Indiana: controller duties](https://dposchool.com/state-privacy-laws/state/indiana/controller-duties.md) - [Indiana: processors](https://dposchool.com/state-privacy-laws/state/indiana/processors.md) - [Indiana: enforcement](https://dposchool.com/state-privacy-laws/state/indiana/enforcement.md) - [Kentucky: applicability](https://dposchool.com/state-privacy-laws/state/kentucky/applicability.md) - [Kentucky: consumer rights](https://dposchool.com/state-privacy-laws/state/kentucky/consumer-rights.md) - [Kentucky: sensitive data](https://dposchool.com/state-privacy-laws/state/kentucky/sensitive-data.md) - [Kentucky: controller duties](https://dposchool.com/state-privacy-laws/state/kentucky/controller-duties.md) - [Kentucky: processors](https://dposchool.com/state-privacy-laws/state/kentucky/processors.md) - [Kentucky: enforcement](https://dposchool.com/state-privacy-laws/state/kentucky/enforcement.md) - [Rhode Island: applicability](https://dposchool.com/state-privacy-laws/state/rhode-island/applicability.md) - [Rhode Island: consumer rights](https://dposchool.com/state-privacy-laws/state/rhode-island/consumer-rights.md) - [Rhode Island: sensitive data](https://dposchool.com/state-privacy-laws/state/rhode-island/sensitive-data.md) - [Rhode Island: controller duties](https://dposchool.com/state-privacy-laws/state/rhode-island/controller-duties.md) - [Rhode Island: processors](https://dposchool.com/state-privacy-laws/state/rhode-island/processors.md) - [Rhode Island: enforcement](https://dposchool.com/state-privacy-laws/state/rhode-island/enforcement.md) - [Louisiana: applicability](https://dposchool.com/state-privacy-laws/state/louisiana/applicability.md) - [Louisiana: consumer rights](https://dposchool.com/state-privacy-laws/state/louisiana/consumer-rights.md) - [Louisiana: sensitive data](https://dposchool.com/state-privacy-laws/state/louisiana/sensitive-data.md) - [Louisiana: controller duties](https://dposchool.com/state-privacy-laws/state/louisiana/controller-duties.md) - [Louisiana: processors](https://dposchool.com/state-privacy-laws/state/louisiana/processors.md) - [Louisiana: enforcement](https://dposchool.com/state-privacy-laws/state/louisiana/enforcement.md) - [Oklahoma: applicability](https://dposchool.com/state-privacy-laws/state/oklahoma/applicability.md) - [Oklahoma: consumer rights](https://dposchool.com/state-privacy-laws/state/oklahoma/consumer-rights.md) - [Oklahoma: sensitive data](https://dposchool.com/state-privacy-laws/state/oklahoma/sensitive-data.md) - [Oklahoma: controller duties](https://dposchool.com/state-privacy-laws/state/oklahoma/controller-duties.md) - [Oklahoma: processors](https://dposchool.com/state-privacy-laws/state/oklahoma/processors.md) - [Oklahoma: enforcement](https://dposchool.com/state-privacy-laws/state/oklahoma/enforcement.md) - [Alabama: applicability](https://dposchool.com/state-privacy-laws/state/alabama/applicability.md) - [Alabama: consumer rights](https://dposchool.com/state-privacy-laws/state/alabama/consumer-rights.md) - [Alabama: sensitive data](https://dposchool.com/state-privacy-laws/state/alabama/sensitive-data.md) - [Alabama: controller duties](https://dposchool.com/state-privacy-laws/state/alabama/controller-duties.md) - [Alabama: processors](https://dposchool.com/state-privacy-laws/state/alabama/processors.md) - [Alabama: enforcement](https://dposchool.com/state-privacy-laws/state/alabama/enforcement.md) - [Vermont: applicability](https://dposchool.com/state-privacy-laws/state/vermont/applicability.md) - [Vermont: consumer rights](https://dposchool.com/state-privacy-laws/state/vermont/consumer-rights.md) - [Vermont: sensitive data](https://dposchool.com/state-privacy-laws/state/vermont/sensitive-data.md) - [Vermont: controller duties](https://dposchool.com/state-privacy-laws/state/vermont/controller-duties.md) - [Vermont: processors](https://dposchool.com/state-privacy-laws/state/vermont/processors.md) - [Vermont: enforcement](https://dposchool.com/state-privacy-laws/state/vermont/enforcement.md) - [Florida: applicability](https://dposchool.com/state-privacy-laws/state/florida/applicability.md) - [Florida: consumer rights](https://dposchool.com/state-privacy-laws/state/florida/consumer-rights.md) - [Florida: sensitive data](https://dposchool.com/state-privacy-laws/state/florida/sensitive-data.md) - [Florida: controller duties](https://dposchool.com/state-privacy-laws/state/florida/controller-duties.md) - [Florida: processors](https://dposchool.com/state-privacy-laws/state/florida/processors.md) - [Florida: enforcement](https://dposchool.com/state-privacy-laws/state/florida/enforcement.md) ## Related - [GDPR Navigator](https://dposchool.com/gdpr) - [US Privacy in Practice course](https://dposchool.com/learn/courses/us-privacy-in-practice)