Data Privacy Legislation: A State By State Look

As consumers become more aware, and more concerned about how their data is collected and used, state legislatures are becoming more proactive in introducing comprehensive data privacy laws to protect them. Here is a state-by-state look at data privacy laws in the U.S.

Currently, five states have enacted comprehensive consumer data privacy laws, Utah, Colorado, Connecticut, Virginia, and California. These state laws have some commonalities like the right to access and delete personal information, as well as the right to opt-out of the selling of personal information.

Several states are looking at comprehensive data privacy laws, but they have not yet been signed into law. For a more detailed look at what is happening in your state you can visit

The iapp has a handy legislation tracker that was last updated on October 7, 2022. The chart shows the name of the bill and has links to the bill/statute, as well as the date it was or will be effective. You can check out that chart here: