---
title: "Compare state privacy laws: consumer rights"
canonical: "https://dposchool.com/state-privacy-laws/topic/consumer-rights"
source:
  - "https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?lawCode=CIV&division=3.&part=4.&title=1.81.5."
  - "https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/"
  - "https://leg.colorado.gov/sites/default/files/images/olls/crs2024-title-06.pdf"
  - "https://www.cga.ct.gov/current/pub/chap_743jj.htm"
  - "https://le.utah.gov/xcode/Title13/Chapter61/13-61.html"
  - "https://www.oregonlegislature.gov/bills_laws/ors/ors646A.html"
  - "https://statutes.capitol.texas.gov/Docs/BC/htm/BC.541.htm"
  - "https://archive.legmt.gov/bills/mca/title_0300/chapter_0140/part_0280/sections_index.html"
  - "https://delcode.delaware.gov/title6/c012d/index.html"
  - "https://www.legis.iowa.gov/docs/code/715D.pdf"
  - "https://nebraskalegislature.gov/laws/statutes.php?statute=87-1101"
  - "https://gc.nh.gov/rsa/html/LII/507-H/507-H-mrg.htm"
  - "https://pub.njleg.state.nj.us/Bills/2022/PL23/266_.HTM"
  - "https://publications.tnsosfiles.com/acts/113/pub/pc0408.pdf"
  - "https://www.revisor.mn.gov/statutes/cite/325M.10"
  - "https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl&section=14-4701&enactments=false"
  - "https://iga.in.gov/ic/2026/Title_24.pdf"
  - "https://apps.legislature.ky.gov/law/statutes/chapter.aspx?id=39092"
  - "https://webserver.rilegislature.gov/Statutes/TITLE6/6-48.1/INDEX.htm"
  - "https://legis.la.gov/legis/ViewDocument.aspx?d=1480202"
  - "https://www.oklegislature.gov/cf_pdf/2025-26%20ENR/SB/SB546%20ENR.pdf"
  - "https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/HB351-enr.pdf"
  - "https://legislature.vermont.gov/Documents/2026/Docs/ACTS/ACT145/ACT145%20As%20Enacted.pdf"
  - "http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html"
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en-US"
publisher: "DPO School"
---

# Compare state privacy laws: consumer rights

The rights consumers have, response deadlines and appeals.

Law as of October 28, 2026 · [Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/state-privacy-laws/about#review)

Each entry gives the statute section it comes from. "None" means the law has no such test, period or right. Reference material, not legal advice.

| State | Response deadline (days) | Extension (days) | Appeal | Correction | Portability | Profiling opt-out |
| --- | --- | --- | --- | --- | --- | --- |
| [California](https://dposchool.com/state-privacy-laws/state/california/consumer-rights) | 45 (Cal. Civ. Code § 1798.130(a)(2)(A)) | 45 (Cal. Civ. Code § 1798.130(a)(2)(A)) | No (Cal. Civ. Code § 1798.130) | Yes (Cal. Civ. Code § 1798.106) | Yes (Cal. Civ. Code § 1798.130(a)(2)(A)) | Yes (Cal. Code Regs. tit. 11, §§ 7200(b), 7221 (ADMT for significant decisions, from 2027-01-01)) |
| [Virginia](https://dposchool.com/state-privacy-laws/state/virginia/consumer-rights) | 45 (§ 59.1-577(B)(1)) | 45 (§ 59.1-577(B)(1)) | Yes (§ 59.1-577(C)) | Yes (§ 59.1-577(A)(2)) | Yes (§ 59.1-577(A)(4)) | Yes (§ 59.1-577(A)(5)) |
| [Colorado](https://dposchool.com/state-privacy-laws/state/colorado/consumer-rights) | 45 (C.R.S. § 6-1-1306(2)(a)) | 45 (C.R.S. § 6-1-1306(2)(a)) | Yes (C.R.S. § 6-1-1306(3)) | Yes (C.R.S. § 6-1-1306(1)(c)) | Yes (C.R.S. § 6-1-1306(1)(e)) | Yes (C.R.S. § 6-1-1306(1)(a)(I)(C)) |
| [Connecticut](https://dposchool.com/state-privacy-laws/state/connecticut/consumer-rights) | 45 (Conn. Gen. Stat. § 42-518(c)(1)) | 45 (Conn. Gen. Stat. § 42-518(c)(1)) | Yes (Conn. Gen. Stat. § 42-518(d)) | Yes (Conn. Gen. Stat. § 42-518(a)(2)) | Yes (Conn. Gen. Stat. § 42-518(a)(4)) | Yes (Conn. Gen. Stat. § 42-518(a)(5)(C)) |
| [Utah](https://dposchool.com/state-privacy-laws/state/utah/consumer-rights) | 45 (§ 13-61-203(2)(a)) | 45 (§ 13-61-203(2)(b)) | No (§ 13-61-203) | Yes (§ 13-61-201(4) (from 2026-07-01)) | Yes (§ 13-61-201(3)) | No (§ 13-61-201(5)) |
| [Oregon](https://dposchool.com/state-privacy-laws/state/oregon/consumer-rights) | 45 (ORS 646A.576(5)(a)) | 45 (ORS 646A.576(5)(a)) | Yes (ORS 646A.576(6)) | Yes (ORS 646A.574(1)(b)) | Yes (ORS 646A.574(2)) | Yes (ORS 646A.574(1)(d)(C)) |
| [Texas](https://dposchool.com/state-privacy-laws/state/texas/consumer-rights) | 45 (§ 541.052(b)) | 45 (§ 541.052(b)) | Yes (§ 541.053) | Yes (§ 541.051(b)(2)) | Yes (§ 541.051(b)(4)) | Yes (§ 541.051(b)(5)(C)) |
| [Montana](https://dposchool.com/state-privacy-laws/state/montana/consumer-rights) | 45 (§ 30-14-2808(4)(a)) | 45 (§ 30-14-2808(4)(a)) | Yes (§ 30-14-2808(5)) | Yes (§ 30-14-2808(1)(b)) | Yes (§ 30-14-2808(1)(d)) | Yes (§ 30-14-2808(1)(e)(iii)) |
| [Delaware](https://dposchool.com/state-privacy-laws/state/delaware/consumer-rights) | 45 (§ 12D-104(c)(1)) | 45 (§ 12D-104(c)(1)) | Yes (§ 12D-104(d)) | Yes (§ 12D-104(a)(2)) | Yes (§ 12D-104(a)(4)) | Yes (§ 12D-104(a)(6)c) |
| [Iowa](https://dposchool.com/state-privacy-laws/state/iowa/consumer-rights) | 90 (§ 715D.3(2)(a)) | 45 (§ 715D.3(2)(a)) | Yes (§ 715D.3(3)) | No (§ 715D.3(1)) | Yes (§ 715D.3(1)(c)) | No (§ 715D.3(1)) |
| [Nebraska](https://dposchool.com/state-privacy-laws/state/nebraska/consumer-rights) | 45 (§ 87-1108(2)) | 45 (§ 87-1108(2)) | Yes (§ 87-1109) | Yes (§ 87-1107(2)(b)) | Yes (§ 87-1107(2)(d)) | Yes (§ 87-1107(2)(e)(iii)) |
| [New Hampshire](https://dposchool.com/state-privacy-laws/state/new-hampshire/consumer-rights) | 45 (RSA 507-H:4, III(a)) | 45 (RSA 507-H:4, III(a)) | Yes (RSA 507-H:4, IV) | Yes (RSA 507-H:4, I(b)) | Yes (RSA 507-H:4, I(d)) | Yes (RSA 507-H:4, I(e)) |
| [New Jersey](https://dposchool.com/state-privacy-laws/state/new-jersey/consumer-rights) | 45 (C.56:8-166.7(a)) | 45 (C.56:8-166.7(a)) | Yes (C.56:8-166.7(f)) | Yes (C.56:8-166.10(a)(2)) | Yes (C.56:8-166.10(a)(4)) | Yes (C.56:8-166.10(a)(5)) |
| [Tennessee](https://dposchool.com/state-privacy-laws/state/tennessee/consumer-rights) | 45 (Tenn. Code Ann. § 47-18-3304(b)(1)) | 45 (Tenn. Code Ann. § 47-18-3304(b)(1)) | Yes (Tenn. Code Ann. § 47-18-3304(c)) | Yes (Tenn. Code Ann. § 47-18-3304(a)(2)(B)) | Yes (Tenn. Code Ann. § 47-18-3304(a)(2)(D)) | Yes (Tenn. Code Ann. § 47-18-3304(a)(2)(E)(iii)) |
| [Minnesota](https://dposchool.com/state-privacy-laws/state/minnesota/consumer-rights) | 45 (§ 325M.14, subd. 4(e)) | 45 (§ 325M.14, subd. 4(e)) | Yes (§ 325M.14, subd. 5) | Yes (§ 325M.14, subd. 1(c)) | Yes (§ 325M.14, subd. 1(e)) | Yes (§ 325M.14, subd. 1(f)) |
| [Maryland](https://dposchool.com/state-privacy-laws/state/maryland/consumer-rights) | 45 (§ 14-4705(e)(2)(i)) | 45 (§ 14-4705(e)(2)(ii)) | Yes (§ 14-4705(f)) | Yes (§ 14-4705(b)(3)) | Yes (§ 14-4705(b)(5)) | Yes (§ 14-4705(b)(7)(iii)) |
| [Indiana](https://dposchool.com/state-privacy-laws/state/indiana/consumer-rights) | 45 (IC 24-15-3-1(c)(1)) | 45 (IC 24-15-3-1(c)(1)) | Yes (IC 24-15-3-1(d)) | Yes (IC 24-15-3-1(b)(2)) | Yes (IC 24-15-3-1(b)(4)) | Yes (IC 24-15-3-1(b)(5)(C)) |
| [Kentucky](https://dposchool.com/state-privacy-laws/state/kentucky/consumer-rights) | 45 (KRS 367.3615(3)(a)) | 45 (KRS 367.3615(3)(a)) | Yes (KRS 367.3615(4)) | Yes (KRS 367.3615(2)(b)) | Yes (KRS 367.3615(2)(d)) | Yes (KRS 367.3615(2)(e)) |
| [Rhode Island](https://dposchool.com/state-privacy-laws/state/rhode-island/consumer-rights) | 45 (§ 6-48.1-6(b)(1)) | 45 (§ 6-48.1-6(b)(1)) | Yes (§ 6-48.1-6(b)(6)) | Yes (§ 6-48.1-5(e)(2)) | Yes (§ 6-48.1-5(e)(3)) | Yes (§ 6-48.1-5(e)(4)) |
| [Louisiana](https://dposchool.com/state-privacy-laws/state/louisiana/consumer-rights) | 45 (La. R.S. 51:1780.3(B)(2)) | 45 (La. R.S. 51:1780.3(B)(2)) | Yes (La. R.S. 51:1780.3(C)) | Yes (La. R.S. 51:1780.3(A)(2)(b)) | Yes (La. R.S. 51:1780.3(A)(2)(d)) | Yes (La. R.S. 51:1780.3(A)(2)(e)(iii)) |
| [Oklahoma](https://dposchool.com/state-privacy-laws/state/oklahoma/consumer-rights) | 45 (SB 546 § 3(B) (75A O.S. § 302)) | 45 (SB 546 § 3(B) (75A O.S. § 302)) | Yes (SB 546 § 4 (75A O.S. § 303)) | Yes (SB 546 § 2(B)(2) (75A O.S. § 301)) | Yes (SB 546 § 2(B)(4) (75A O.S. § 301)) | Yes (SB 546 § 2(B)(5)(c) (75A O.S. § 301)) |
| [Alabama](https://dposchool.com/state-privacy-laws/state/alabama/consumer-rights) | 45 (Act 2026-552, § 5(d)(1) (Ala. Code § 8-44-5)) | 45 (Act 2026-552, § 5(d)(1) (Ala. Code § 8-44-5)) | No (Act 2026-552, § 5 (Ala. Code § 8-44-5)) | Yes (Act 2026-552, § 5(a)(2) (Ala. Code § 8-44-5)) | Yes (Act 2026-552, § 5(a)(4) (Ala. Code § 8-44-5)) | Yes (Act 2026-552, § 5(a)(5)(c) (Ala. Code § 8-44-5)) |
| [Vermont](https://dposchool.com/state-privacy-laws/state/vermont/consumer-rights) | 45 (Act 145, Sec. 1, 9 V.S.A. § 2415d(c)(1)(A)) | 45 (Act 145, Sec. 1, 9 V.S.A. § 2415d(c)(1)(B)) | Yes (Act 145, Sec. 1, 9 V.S.A. § 2415d(d)) | Yes (Act 145, Sec. 1, 9 V.S.A. § 2415d(a)(2)) | Yes (Act 145, Sec. 1, 9 V.S.A. § 2415d(a)(4)) | Yes (Act 145, Sec. 1, 9 V.S.A. § 2415d(a)(5)(C)) |
| **Narrower laws** |  |  |  |  |  |  |
| [Florida](https://dposchool.com/state-privacy-laws/state/florida/consumer-rights) | 45 (Fla. Stat. § 501.706(2)) | 15 (Fla. Stat. § 501.706(2)) | Yes (Fla. Stat. § 501.707) | Yes (Fla. Stat. § 501.705(2)(b)) | Yes (Fla. Stat. § 501.705(2)(d)) | Yes (Fla. Stat. § 501.705(2)(e)3.) |

## Other comparisons

- [Applicability](https://dposchool.com/state-privacy-laws/topic/applicability)
- [Sensitive data](https://dposchool.com/state-privacy-laws/topic/sensitive-data)
- [Controller duties](https://dposchool.com/state-privacy-laws/topic/controller-duties)
- [Processors](https://dposchool.com/state-privacy-laws/topic/processors)
- [Enforcement](https://dposchool.com/state-privacy-laws/topic/enforcement)

## Related GDPR articles

Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions.

- [Article 15: Right of access by the data subject](https://dposchool.com/gdpr/article/15) (access)
- [Article 17: Right to erasure (‘right to be forgotten’)](https://dposchool.com/gdpr/article/17) (deletion)
- [Article 20: Right to data portability](https://dposchool.com/gdpr/article/20) (portability)

## Navigation

[US State Privacy Laws](https://dposchool.com/state-privacy-laws) / Compare: Consumer rights

Learning US privacy law? An audio course on the privacy law that applies to US businesses: [US Privacy in Practice](https://dposchool.com/learn/courses/us-privacy-in-practice). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/state-privacy-laws/llms.txt
- JSON API: https://dposchool.com/state-privacy-laws/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents