"The number of individual US states with local data privacy legislation on their statute books has expanded rapidly in 2025, with nine more state laws coming into effect this year and three more states - Indiana, Kentucky and Rhode Island - slated to start enforcing their own rules on 1 January 2026, according to a report compiled by the International Association of Privacy Professionals (IAPP)."
"A further 16 states are currently deliberating comprehensive privacy bills, including economic powerhouse states such as Massachusetts and New York. The resulting report captures an in-depth picture of each of the separate state privacy laws, with the overall goal being to outline the contours of each state to offer more meaningful guidance to organisations. The IAPP has been actively tracking amendments to state privacy laws - Connecticut, Montana and Oregon all made changes his year to expand the scope of applicability,"
State-level data privacy legislation in the United States expanded markedly in 2025, with multiple new laws taking effect and additional states scheduling enforcement for January 2026. Several states enacted comprehensive privacy laws in recent years, and a further 16 states are actively considering comprehensive bills. The International Association of Privacy Professionals has tracked amendments that broaden applicability, strengthen consumer rights, and increase business obligations. Applicability of each state law requires multistep assessment because each law uses unique thresholds related to jurisdiction, revenue, and volume of personal data, creating complex compliance requirements for organizations operating across state lines.
Read at ComputerWeekly.com
Unable to calculate read time
Collection
[
|
...
]