Overview
The US State Privacy Legislation Tracker provides up-to-date information on comprehensive state privacy laws and bills, highlighting key dates, legislative scope, and differences across states to inform privacy professionals and stakeholders.
Purpose and Scope of Tracker
- Tracks only comprehensive state privacy bills, excluding those with narrow scope, coverage, or consumer rights.
- Features a chart, map, and directory with state-specific information and key legislative dates.
- IAPP annually reviews and may update its definition of “comprehensive” based on new information or feedback.
- Excludes industry- or data-specific privacy laws from its coverage.
Included Resources
- Provides downloadable charts and maps detailing the legislative process and provisions of each state bill.
- Offers a detailed report analyzing enacted comprehensive privacy laws as of June 2024.
- Contains a directory with legislation links and effective dates for each state.
- Links to additional resources on US state privacy and AI governance laws.
Criteria for Comprehensive Laws
- Bills must address a broad range of personal information, industries, and consumer rights.
- Narrow bills—focused on specific data types, subjects, or providing only one/two rights—are not included.
- For further clarity, a linked article explains IAPP’s approach to defining comprehensive privacy legislation.
Notable State Legislation and Milestones
- Lists key dates for enactment and effectiveness for laws in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.
- Tracks specific deadlines for rights to opt out, assessments, cure periods, and obligations related to minors, advertising, or biometric data.
Participation and Updates
- Users are encouraged to report missing comprehensive bills to the IAPP research team.
- Tracker is updated regularly, most recently on 7 July 2025, with previous chart and map editions available for reference.
Key Dates / Deadlines
- Numerous effective and compliance dates span from 2018 through 2029, including signature dates, effective dates for consumer rights, assessment requirements, and right-to-cure deadlines.
- States like California, Colorado, Connecticut, and others have notable phased implementations and specific upcoming obligations.
Recommendations / Advice
- Always verify key compliance dates and deadlines using official legislative sources.
- Consult linked resources for current definitions and scope of comprehensive privacy laws.