Privacy Law Library
U.S. federal and state laws related to privacy: what each one requires, who enforces it, whether it is in force, and the bills and federal rules that may change it. Each verified entry cites the official source it was checked against. Research reference, not legal advice.
- Laws listed
- 799
- Verified against official sources
- 795
- Places with verified laws
- 25
- Bills tracked
- 179
799 laws
Download: CSV · JSON (with obligations) · Bills
| Law | Where | Citation | Status | Topics | Checked |
|---|---|---|---|---|---|
| Age verification for adult websites; consent to publish private images (Act 2024-97)(AL Adult Website Age Verification) | Alabama | Ala. Code §§ 8-19G-1 to 8-19G-10 (Act 2024-97, HB164) | In force | Children, Other | Verified 2026-09-25 |
| Agent Billy Clardy III Act (state wiretap law)(Clardy Act) | Alabama | Ala. Code §§ 20-2B-1 to 20-2B-12 (Act 2022-236, HB17; amended Act 2025-447, HB137) | In force | Communications, Government records | Verified 2026-09-25 |
| Alabama Data Breach Notification Act of 2018(ADBNA) | Alabama | Ala. Code §§ 8-38-1 to 8-38-12 (Act 2018-396, SB318) | In force | Breach notification, Data security | Verified 2026-09-25 |
| Alabama Do-Not-Call law (telephone solicitation objection database)(AL Do-Not-Call) | Alabama | Ala. Code §§ 8-19C-1 to 8-19C-10 (Act 99-450) | In force | Marketing, Communications | Verified 2026-09-25 |
| Alabama Genetic Data Privacy Act(AGDPA) | Alabama | Ala. Code §§ 8-43-1 to 8-43-6 (Act 2024-384, HB21) | In force | Genetic, Health | Verified 2026-09-25 |
| Alabama Personal Data Protection Act(APDPA) | Alabama | Ala. Code §§ 8-44-1 to 8-44-11 (Act 2026-552, HB351) | Enacted, not yet in force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Alabama Telemarketing Act(ATA) | Alabama | Ala. Code §§ 8-19A-1 to 8-19A-24 (Act 94-650; amended Act 99-450) | In force | Marketing | Verified 2026-09-25 |
| App Store Age Verification and Parental Consent Law (commonly called the Alabama App Store Accountability Act)(AL App Store Act) | Alabama | Ala. Code §§ 8-19K-1 to 8-19K-14 (Act 2026-59, HB161) | Enacted, not yet in force | Children, Other | Verified 2026-09-25 |
| Ban on using school board public records for solicitation; redaction of payment data in public contract records(AL School Records Solicitation Ban) | Alabama | Act 2026-592 (SB272), §§ 1-2 (codification in the Code of Alabama not yet shown on ALISON) | In force | Government records, Marketing | Verified 2026-09-25 |
| Confidentiality of sexually transmitted disease medical records(AL STD Records Confidentiality) | Alabama | Ala. Code § 22-11A-22 (Act 87-574) | In force | Health | Verified 2026-09-25 |
| Consumer credit report security freeze(AL Security Freeze Law) | Alabama | Ala. Code §§ 8-35-1 to 8-35-3 (Act 2012-500) | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Consumer Identity Protection Act(AL CIPA (identity theft)) | Alabama | Ala. Code §§ 13A-8-190 to 13A-8-201 (Act 2001-312; amended Acts 2003-355, 2006-148, 2012-368) | In force | Financial, Credit reporting, Other | Verified 2026-09-25 |
| Crime of doxing(AL Doxing Law) | Alabama | Ala. Code § 13A-11-38 (Act 2023-369, HB287) | In force | Other | Verified 2026-09-25 |
| Crime of phishing(AL Phishing Law) | Alabama | Ala. Code § 13A-8-114 (Act 2012-432) | In force | Other, Data security | Verified 2026-09-25 |
| Criminal eavesdropping and surveillance (one-party consent)(AL Eavesdropping Law) | Alabama | Ala. Code §§ 13A-11-30 to 13A-11-37 | In force | Communications | Verified 2026-09-25 |
| Distributing or creating a private image (nonconsensual intimate images, including AI-generated)(AL Private Image Law) | Alabama | Ala. Code § 13A-6-240; civil liability Ala. Code § 6-5-840 (Act 2017-414; amended Acts 2023-464, 2024-96, 2024-97, 2024-98) | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Distribution of materially deceptive media to influence an election(AL Election Deepfake Law) | Alabama | Ala. Code § 17-5-16.1 (Act 2024-349, HB172) | In force | Artificial intelligence | Verified 2026-09-25 |
| Electronic stalking (unauthorized electronic tracking devices)(AL Electronic Stalking Law) | Alabama | Ala. Code §§ 13A-6-92, 13A-6-95, 13A-6-96 (Act 2023-481, HB153) | In force | Location | Verified 2026-09-25 |
| Genetic testing for cancer predisposition in health benefit plans(AL Cancer Genetic Test Insurance Law) | Alabama | Ala. Code §§ 27-53-1 to 27-53-4 (Act 97-721) | In force | Genetic, Health | Verified 2026-09-25 |
| Insurance Data Security Law(AL IDSL) | Alabama | Ala. Code §§ 27-62-1 to 27-62-11 (Act 2019-98, SB54) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Limitations on use of artificial intelligence by health benefit plan providers(AL AI Prior Authorization Law) | Alabama | Ala. Code § 27-1-17.2 (Act 2026-589, SB63) | Enacted, not yet in force | Artificial intelligence, Health | Verified 2026-09-25 |
| Redaction of Social Security numbers and birthdates in probate court filings(AL Probate SSN Redaction) | Alabama | Ala. Code § 12-13-22 (Act 2009-567; amended Act 2010-707) | In force | Data security, Government records | Verified 2026-09-25 |
| Second Amendment Financial Privacy Act(AL 2A Financial Privacy Act) | Alabama | Ala. Code §§ 5-29-1 to 5-29-4 (Act 2024-232, SB281) | In force | Financial | Verified 2026-09-25 |
| Voter list dissemination and commercial-use ban(AL Voter List Law) | Alabama | Ala. Code § 17-4-38 (as amended by Act 2026-570, HB67) | In force | Government records, Marketing | Verified 2026-09-25 |
| AI and algorithms in health plan utilization review (SB 1120, 'Physicians Make Decisions Act')(SB 1120) | California | Cal. Health & Safety Code 1367.01(k); Cal. Ins. Code 10123.135 | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Automated license plate recognition systems (private operators)(ALPR law) | California | Cal. Civ. Code 1798.90.5-1798.90.55 | In force | Location, Data security | Verified 2026-09-25 |
| Automated-decision systems in employment (Civil Rights Council FEHA regulations)(FEHA ADS Regulations) | California | Cal. Code Regs. tit. 2, 11008 et seq. (amendments to FEHA employment regulations) | In force | Artificial intelligence, Employees | Verified 2026-09-25 |
| Automatic dialing-announcing devices (robocalls)(ADAD law) | California | Cal. Pub. Util. Code 2871-2876 | In force | Marketing, Communications | Verified 2026-09-25 |
| Bolstering Online Transparency (bot disclosure) law (SB 1001)(SB 1001 Bot Disclosure) | California | Cal. Bus. & Prof. Code 17940-17943 | In force | Artificial intelligence, Marketing | Verified 2026-09-25 |
| California Age-Appropriate Design Code Act (AB 2273, 2022)(CAADCA) | California | Cal. Civ. Code 1798.99.28-1798.99.40 (Title 1.81.47, as enacted by AB 2273) | Blocked by a court | Children | Verified 2026-09-25 |
| California AI Transparency Act (SB 942, as amended by AB 853)(AI Transparency Act) | California | Cal. Bus. & Prof. Code 22757-22757.6 (Chapter 25) | In force | Artificial intelligence | Verified 2026-09-25 |
| California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Proposition 24)(CCPA/CPRA) | California | Cal. Civ. Code 1798.100-1798.199.100 (Title 1.81.5) | In force | Comprehensive privacy | Verified 2026-09-25 |
| California Consumer Privacy Act Regulations (including 2025 Cybersecurity Audit, Risk Assessment, and Automated Decisionmaking Technology rules)(CCPA Regulations) | California | Cal. Code Regs. tit. 11, 7000 et seq. | In force | Comprehensive privacy, Artificial intelligence, Data security | Verified 2026-09-25 |
| California Financial Information Privacy Act(CalFIPA) | California | Cal. Fin. Code 4050-4060 | In force | Financial | Verified 2026-09-25 |
| California Invasion of Privacy Act(CA CIPA) | California | Cal. Penal Code 630-638.55 | In force | Communications, Location | Verified 2026-09-25 |
| California Online Privacy Protection Act(CalOPPA) | California | Cal. Bus. & Prof. Code 22575-22579 | In force | Comprehensive privacy, Other | Verified 2026-09-25 |
| Commercial email advertisements (anti-spam) and unsolicited text message ads(Anti-spam (17529.5, 17538.41)) | California | Cal. Bus. & Prof. Code 17529-17529.9; 17538.41 | In force | Marketing | Verified 2026-09-25 |
| Companion chatbots (SB 243)(SB 243) | California | Cal. Bus. & Prof. Code 22601-22605 (Chapter 22.6) | In force | Artificial intelligence, Children | Verified 2026-09-25 |
| Companion Chatbots: Children's Safety ('Adam's Law', SB 1119)(SB 1119) | California | Cal. Bus. & Prof. Code 21810-21816 (Chapter 11.6, added by Stats. 2026, Ch. 190) | Enacted, not yet in force | Artificial intelligence, Children | Verified 2026-09-25 |
| Comprehensive Computer Data Access and Fraud Act(CDAFA (Penal Code 502)) | California | Cal. Penal Code 502 | In force | Data security, Other | Verified 2026-09-25 |
| Confidentiality of Medical Information Act(CMIA) | California | Cal. Civ. Code 56-56.37 (Part 2.6) | In force | Health, Employees | Verified 2026-09-25 |
| Confidentiality of Social Security Numbers(SSN Protection (1798.85)) | California | Cal. Civ. Code 1798.85-1798.89 | In force | Data security | Verified 2026-09-25 |
| Connected television voice recognition(Smart TV law) | California | Cal. Bus. & Prof. Code 22948.20-22948.25 | In force | Other, Communications | Verified 2026-09-25 |
| Consumer Credit Reporting Agencies Act (including security freezes)(CCRAA) | California | Cal. Civ. Code 1785.1-1785.36 | In force | Credit reporting | Verified 2026-09-25 |
| Consumer Protection Against Computer Spyware Act(Spyware Act) | California | Cal. Bus. & Prof. Code 22947-22947.6 | In force | Other, Data security | Verified 2026-09-25 |
| Covered platform age restriction: no addictive features for users under 16 (AB 1709)(AB 1709) | California | Cal. Bus. & Prof. Code 22682-22686 (added by Stats. 2026, Ch. 183); Cal. Gov. Code 11530 et seq. | Enacted, not yet in force | Children | Verified 2026-09-25 |
| Customer Records: disposal of records containing personal information(Records Disposal (1798.81)) | California | Cal. Civ. Code 1798.81 | In force | Data security | Verified 2026-09-25 |
| Data Broker Registration law and the Delete Act (SB 362), with the Delete Request and Opt-out Platform (DROP)(Delete Act) | California | Cal. Civ. Code 1798.99.80-1798.99.89 (Title 1.81.48); Cal. Code Regs. tit. 11, 7600 et seq. | In force | Data brokers | Verified 2026-09-25 |
| Digital Age Assurance Act (AB 1043, 2025, amended by AB 1856, 2026)(DAAA) | California | Cal. Civ. Code 1798.500-1798.511 (Title 1.81.9) | Enacted, not yet in force | Children | Verified 2026-09-25 |
| Early Learning Personal Information Protection Act(ELPIPA) | California | Cal. Bus. & Prof. Code 22586-22586.1 | In force | Students, Children | Verified 2026-09-25 |
| Employee and applicant social media privacy(Lab. Code 980) | California | Cal. Lab. Code 980 | In force | Employees | Verified 2026-09-25 |
| Employee photographs and fingerprints furnished to third parties(Lab. Code 1051) | California | Cal. Lab. Code 1051 | In force | Employees, Biometric | Verified 2026-09-25 |
| Generative AI in patient communications (AB 3030)(AB 3030) | California | Cal. Health & Safety Code 1339.75 | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Generative Artificial Intelligence Training Data Transparency (AB 2013)(AB 2013) | California | Cal. Civ. Code 3110-3111 | In force | Artificial intelligence | Verified 2026-09-25 |
| Genetic Information Privacy Act(GIPA) | California | Cal. Civ. Code 56.18-56.186 | In force | Genetic, Health | Verified 2026-09-25 |
| Health and Location Data Privacy: family planning centers and geofencing health care providers(Health & Location Privacy (AB 45)) | California | Cal. Civ. Code 1798.99.90-1798.99.93 (Title 1.81.49) | In force | Location, Health | Verified 2026-09-25 |
| Health facility reporting of unauthorized access to medical information(HSC 1280.15) | California | Cal. Health & Safety Code 1280.15 | In force | Health, Breach notification | Verified 2026-09-25 |
| Higher Education Student Information Protection Act (AB 1159, 2026)(HESIPA) | California | Cal. Bus. & Prof. Code 22587 et seq. (Chapter 22.2.6, added by Stats. 2026, Ch. 182) | Enacted, not yet in force | Students | Verified 2026-09-25 |
| Insurance Information and Privacy Protection Act(IIPPA) | California | Cal. Ins. Code 791-791.29 | In force | Financial, Health | Verified 2026-09-25 |
| Investigative Consumer Reporting Agencies Act(ICRAA) | California | Cal. Civ. Code 1786-1786.60 | In force | Credit reporting, Employees | Verified 2026-09-25 |
| K-12 Pupil Online Personal Information Protection Act (formerly SOPIPA)(KOPIPA (SOPIPA)) | California | Cal. Bus. & Prof. Code 22584-22585 | In force | Students, Children | Verified 2026-09-25 |
| Limits on employer use of consumer credit reports(Lab. Code 1024.5) | California | Cal. Lab. Code 1024.5; Cal. Civ. Code 1785.20.5 | In force | Employees, Credit reporting | Verified 2026-09-25 |
| No recording in employee restrooms, locker rooms, and changing rooms(Lab. Code 435) | California | Cal. Lab. Code 435 | In force | Employees | Verified 2026-09-25 |
| Nonconsensual distribution of intimate images and sexually explicit deepfakes (civil actions)(Civ. Code 1708.85-1708.86) | California | Cal. Civ. Code 1708.85, 1708.86 | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Online services, products, or features likely to be accessed by children (AB 2246, 2026 replacement of the Age-Appropriate Design Code)(AB 2246 Children's Online Design Law) | California | Cal. Civ. Code 1798.99.28-1798.99.34 (Title 1.81.47, as added by Stats. 2026, Ch. 187) | Enacted, not yet in force | Children | Verified 2026-09-25 |
| Parent's Accountability and Child Protection Act (online sales of age-restricted products)(Civ. Code 1798.99.1) | California | Cal. Civ. Code 1798.99.1 | In force | Children | Verified 2026-09-25 |
| Privacy Rights for California Minors in the Digital World (online eraser and harmful-product marketing limits)(Minors Online Privacy (22580)) | California | Cal. Bus. & Prof. Code 22580-22582 | In force | Children, Marketing | Verified 2026-09-25 |
| Protecting Our Kids from Social Media Addiction Act (SB 976)(SB 976) | California | Cal. Health & Safety Code 27000-27007 | In force | Children | Verified 2026-09-25 |
| Pupil records: contracts with third-party digital service providers(Educ. Code 49073.1) | California | Cal. Educ. Code 49073.1 | In force | Students | Verified 2026-09-25 |
| Reader Privacy Act(Reader Privacy Act) | California | Cal. Civ. Code 1798.90-1798.90.05 | In force | Other | Verified 2026-09-25 |
| Reasonable security for personal information (Customer Records)(Data Security (1798.81.5)) | California | Cal. Civ. Code 1798.81.5 | In force | Data security | Verified 2026-09-25 |
| Right of privacy, California Constitution(Cal. Const. art. I, sec. 1) | California | Cal. Const. art. I, sec. 1 | In force | Other | Verified 2026-09-25 |
| Scanning or swiping driver's licenses and ID cards(Civ. Code 1798.90.1) | California | Cal. Civ. Code 1798.90.1 | In force | Other, Data security | Verified 2026-09-25 |
| Security breach notification (businesses)(Breach Notification (1798.82)) | California | Cal. Civ. Code 1798.82 | In force | Breach notification | Verified 2026-09-25 |
| Security of Connected Devices (IoT security law)(IoT Security (SB 327)) | California | Cal. Civ. Code 1798.91.04-1798.91.06 (Title 1.81.26) | In force | Data security | Verified 2026-09-25 |
| Shine the Light law (disclosure of personal information shared for direct marketing)(Shine the Light) | California | Cal. Civ. Code 1798.83-1798.84 | In force | Marketing, Comprehensive privacy | Verified 2026-09-25 |
| Social media account deletion (AB 656)(AB 656) | California | Cal. Civ. Code 3273.90-3273.91 (Title 25) | In force | Comprehensive privacy, Other | Verified 2026-09-25 |
| Social Media Warning Law (AB 56)(AB 56) | California | Cal. Health & Safety Code 28000 et seq. (Chapter 25) | Enacted, not yet in force | Children, Other | Verified 2026-09-25 |
| Song-Beverly Credit Card Act: limits on collecting personal information at checkout(Song-Beverly 1747.08) | California | Cal. Civ. Code 1747.08 | In force | Financial, Other | Verified 2026-09-25 |
| Student social media privacy (postsecondary institutions)(Educ. Code 99120-99122) | California | Cal. Educ. Code 99120-99122 | In force | Students | Verified 2026-09-25 |
| Synthetic performers in advertising (SB 1050)(SB 1050) | California | Cal. Bus. & Prof. Code 17610 (added by Stats. 2026, Ch. 246) | Enacted, not yet in force | Artificial intelligence, Marketing | Verified 2026-09-25 |
| Telephone solicitation and do-not-call rules(Cal. Do Not Call (17592)) | California | Cal. Bus. & Prof. Code 17590-17594 | In force | Marketing | Verified 2026-09-25 |
| Transparency in Frontier Artificial Intelligence Act (SB 53)(TFAIA) | California | Cal. Bus. & Prof. Code 22757.10-22757.16 | In force | Artificial intelligence | Verified 2026-09-25 |
| Vehicle event data recorders(Veh. Code 9951) | California | Cal. Veh. Code 9951 | In force | Location, Other | Verified 2026-09-25 |
| Access to personnel files and records(Colorado personnel file access) | Colorado | C.R.S. 8-2-129 | In force | Employees | Verified 2026-09-25 |
| Age Attestation on Computing Devices(SB 26-051) | Colorado | C.R.S. 6-30-101 to 6-30-105 | Enacted, not yet in force | Children | Verified 2026-09-25 |
| Automated Decision-Making Technology in Consequential Decisions(Colorado ADMT Act (SB 26-189)) | Colorado | C.R.S. 6-1-1701 to 6-1-1709 (Part 17 as repealed and reenacted by SB 26-189); 6-1-105(1)(uuuu) | Enacted, not yet in force | Artificial intelligence, Employees, Comprehensive privacy | Verified 2026-09-25 |
| Automated dialing systems with prerecorded messages(Colorado autodialer law) | Colorado | C.R.S. 18-9-311 | In force | Marketing, Communications | Verified 2026-09-25 |
| Candidate Election Deepfake Disclosures(Colorado election deepfakes (HB 24-1147)) | Colorado | C.R.S. 1-46-101 to 1-46-106; 1-45-111.5(1.5)(c.5) | In force | Artificial intelligence | Verified 2026-09-25 |
| Colorado Artificial Intelligence Act (Consumer Protections for Artificial Intelligence)(Colorado AI Act (SB 24-205)) | Colorado | C.R.S. 6-1-1701 to 6-1-1707 (as enacted by SB 24-205 and amended by SB 25B-004) | Blocked by a court | Artificial intelligence, Employees | Verified 2026-09-25 |
| Colorado Consumer Credit Reporting Act(Colorado CCRA) | Colorado | C.R.S. 5-18-101 to 5-18-118 | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Colorado data breach notification law (Notification of security breach)(Colorado breach notification) | Colorado | C.R.S. 6-1-716 | In force | Breach notification | Verified 2026-09-25 |
| Colorado No-Call List Act(Colorado No-Call List Act) | Colorado | C.R.S. 6-1-901 to 6-1-908 | In force | Marketing, Communications | Verified 2026-09-25 |
| Colorado Privacy Act(CPA) | Colorado | C.R.S. 6-1-1301 to 6-1-1314 (Title 6, Article 1, Part 13) | In force | Comprehensive privacy, Children, Biometric, Location, Data security | Verified 2026-09-25 |
| Colorado Privacy Act biological and neural data amendment (Protect Privacy of Biological Data)(CPA neural data (HB 24-1058)) | Colorado | C.R.S. 6-1-1303(2.2), (16.7), (24)(d) | In force | Biometric, Health, Comprehensive privacy | Verified 2026-09-25 |
| Colorado Privacy Act biometric amendments (Privacy of Biometric Identifiers and Data)(CPA biometric (HB 24-1130)) | Colorado | C.R.S. 6-1-1314; 6-1-1303(2.4), (2.5); 6-1-1304(1)(a)(II) | In force | Biometric, Employees | Verified 2026-09-25 |
| Colorado Privacy Act minors' online protections (Privacy Protections for Children's Online Data)(CPA minors (SB 24-041)) | Colorado | C.R.S. 6-1-1305.5, 6-1-1308.5, 6-1-1309.5; 6-1-1303(16.5), (16.8); 6-1-1311(1)(d)(II) | In force | Children, Location | Verified 2026-09-25 |
| Colorado Privacy Act Rules(CPA Rules) | Colorado | 4 CCR 904-3 | In force | Comprehensive privacy, Children, Biometric | Verified 2026-09-25 |
| Colorado telemarketing law (commercial telephone sellers)(Colorado telemarketing registration) | Colorado | C.R.S. 6-1-301 to 6-1-305 | In force | Marketing | Verified 2026-09-25 |
| Colorado wiretapping and eavesdropping laws(Colorado wiretap/eavesdropping) | Colorado | C.R.S. 18-9-301 to 18-9-305 | In force | Communications | Verified 2026-09-25 |
| Confidentiality of social security numbers(Colorado SSN protection) | Colorado | C.R.S. 6-1-715 | In force | Data security | Verified 2026-09-25 |
| Conversational Artificial Intelligence Service Operator Requirements (Chatbot Safety Act)(Chatbot Safety Act (HB 26-1263)) | Colorado | C.R.S. 6-1-1708 and 6-1-1701(3.5), (10.5), (12.5) as added by HB 26-1263 (numbering may be changed by the revisor because SB 26-189 reenacts Part 17) | Enacted, not yet in force | Artificial intelligence, Children | Verified 2026-09-25 |
| Disposal and protection of personal identifying information(Colorado data disposal and security) | Colorado | C.R.S. 6-1-713; 6-1-713.5 | In force | Data security | Verified 2026-09-25 |
| Employer access to employees' personal online accounts(Colorado social media password law) | Colorado | C.R.S. 8-2-127 | In force | Employees | Verified 2026-09-25 |
| Employment Opportunity Act (employer use of consumer credit information)(Colorado Employment Opportunity Act) | Colorado | C.R.S. 8-2-126 | In force | Employees, Credit reporting | Verified 2026-09-25 |
| Genetic information in health insurance(Colorado genetic information (health insurance)) | Colorado | C.R.S. 10-3-1104.6 | In force | Genetic, Health | Verified 2026-09-25 |
| Genetic testing in group disability, long-term care, life, and individual disability insurance(Colorado genetic testing (other insurance)) | Colorado | C.R.S. 10-3-1104.7 | In force | Genetic | Verified 2026-09-25 |
| Healthier Social Media Use by Youth (social media warnings for minors)(HB 24-1136) | Colorado | C.R.S. 6-1-1601 | Blocked by a court | Children | Verified 2026-09-25 |
| Insurers' use of external consumer data, algorithms, and predictive models(Colorado insurance AI law (SB 21-169)) | Colorado | C.R.S. 10-3-1104.9 | In force | Artificial intelligence, Financial | Verified 2026-09-25 |
| Patient access to medical records(Colorado patient records access) | Colorado | C.R.S. 25-1-801 to 25-1-803 | In force | Health | Verified 2026-09-25 |
| Personal information on the internet: protected persons (anti-doxxing)(Colorado protected-person doxxing law) | Colorado | C.R.S. 18-9-313 | In force | Other, Government records | Verified 2026-09-25 |
| Preventing Unauthorized Disclosure of Intimate Digital Depictions Act(Colorado intimate deepfakes (SB 25-288)) | Colorado | C.R.S. 13-21-1501 to 13-21-1507; 18-7-107, 18-7-108 (as amended) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Protections for Minors Featured in Digital Content(HB 26-1058) | Colorado | C.R.S. 8-12.5-101 to 8-12.5-104 | Enacted, not yet in force | Children, Other | Verified 2026-09-25 |
| Psychotherapy Artificial Intelligence Restrictions(HB 26-1195) | Colorado | C.R.S. 12-245-224.5; 12-245-224(1)(w); 6-1-1705.2 | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Restrictions on credit card receipts(Colorado receipt truncation) | Colorado | C.R.S. 6-1-711 | In force | Financial, Data security | Verified 2026-09-25 |
| Spam Reduction Act of 2008 (commercial electronic mail)(Colorado Spam Reduction Act) | Colorado | C.R.S. 6-1-702.5 | In force | Marketing | Verified 2026-09-25 |
| Student Data Transparency and Security Act(Colorado Student Data Act) | Colorado | C.R.S. 22-16-101 to 22-16-112 | In force | Students, Children, Data security | Verified 2026-09-25 |
| Unsolicited facsimiles(Colorado junk fax law) | Colorado | C.R.S. 6-1-702 | In force | Marketing | Verified 2026-09-25 |
| Use of Artificial Intelligence in Health Care (utilization review)(HB 26-1139) | Colorado | C.R.S. 10-16-112.7; 25.5-1-209 | Enacted, not yet in force | Artificial intelligence, Health | Verified 2026-09-25 |
| Breach of Security Involving Computerized Personal Information (data breach notification)(CT Breach Notification) | Connecticut | Conn. Gen. Stat. 36a-701b | In force | Breach notification, Data security | Verified 2026-09-25 |
| Confidentiality of Financial Institution Customer Records(CT Financial Records Privacy) | Connecticut | Conn. Gen. Stat. 36a-41 to 36a-45 | In force | Financial | Verified 2026-09-25 |
| Confidentiality of HIV-Related Information(CT HIV Confidentiality) | Connecticut | Conn. Gen. Stat. 19a-581 to 19a-590 (ch. 368x) | In force | Health | Verified 2026-09-25 |
| Connected Devices with Cameras or Microphones (P.A. 25-44)(CT Connected Devices) | Connecticut | Conn. Gen. Stat. 42-531 (P.A. 25-44, s. 2) | In force | Other, Data security, Marketing | Verified 2026-09-25 |
| Connected Vehicle Services: Survivor Requests (P.A. 25-113, s. 19)(CT Connected Vehicle Safety) | Connecticut | Conn. Gen. Stat. 42-531a (P.A. 25-113, s. 19) | In force | Location, Other | Verified 2026-09-25 |
| Connecticut Artificial Intelligence Responsibility and Transparency Act (CART Act; An Act Concerning Online Safety)(CT CART Act) | Connecticut | P.A. 26-15 (SB 5, 2026), esp. ss. 4-6 (AI companions), 7-12 (automated employment decision technology), 13-14 (Conn. Gen. Stat. 46a-60(b), 46a-81c), 15 (provenance data), 39 (recommendation feeds and minors); not yet codified | Enacted, not yet in force | Artificial intelligence, Children, Employees | Verified 2026-09-25 |
| Connecticut Data Privacy Act (Act Concerning Personal Data Privacy and Online Monitoring)(CTDPA) | Connecticut | Conn. Gen. Stat. 42-515 to 42-525 (ch. 743jj, part I); enacted by P.A. 22-15; amended by P.A. 23-56, 25-113 and 26-64 | In force | Comprehensive privacy, Children, Biometric, Location, Data security, Artificial intelligence | Verified 2026-09-25 |
| Connecticut Insurance Information and Privacy Protection Act(CT IIPPA) | Connecticut | Conn. Gen. Stat. 38a-975 to 38a-999a (ch. 705) | In force | Financial, Health | Verified 2026-09-25 |
| Consumer Health Data Privacy (CTDPA consumer health data provisions)(CT Consumer Health Data) | Connecticut | Conn. Gen. Stat. 42-526; 42-515(9)-(10); 42-520(a) (sensitive data consent); enacted by P.A. 23-56, ss. 1-2 | In force | Health, Location | Verified 2026-09-25 |
| Data Broker Registration and Accessible Deletion Mechanism (P.A. 26-64, ss. 1-10)(CT Data Broker Registry) | Connecticut | P.A. 26-64, ss. 1-10 (not yet codified as of the 2026 Supplement) | Enacted, not yet in force | Data brokers | Verified 2026-09-25 |
| Direct-to-Consumer Genetic Testing Privacy (P.A. 26-64, ss. 17-19)(CT DTC Genetic Privacy) | Connecticut | P.A. 26-64, ss. 17-19 (not yet codified) | Enacted, not yet in force | Genetic, Health | Verified 2026-09-25 |
| Eavesdropping, Wiretapping and Tampering with Private Communications (criminal)(CT Eavesdropping Law) | Connecticut | Conn. Gen. Stat. 53a-187 to 53a-189 | In force | Communications | Verified 2026-09-25 |
| Electronic Monitoring of Employees: Prior Notice(CT Employee Monitoring Notice) | Connecticut | Conn. Gen. Stat. 31-48d | In force | Employees, Communications | Verified 2026-09-25 |
| Employee Personnel and Medical Files(CT Personnel Files Act) | Connecticut | Conn. Gen. Stat. 31-128a to 31-128j (ch. 563a) | In force | Employees, Health | Verified 2026-09-25 |
| Employer Access to Employees' and Applicants' Personal Online Accounts(CT Social Media Password Law) | Connecticut | Conn. Gen. Stat. 31-40x | In force | Employees | Verified 2026-09-25 |
| Employer Electronic Surveillance of Restrooms, Locker Rooms and Lounges; Recording of Contract Negotiations(CT Workplace Surveillance Limits) | Connecticut | Conn. Gen. Stat. 31-48b | In force | Employees, Communications | Verified 2026-09-25 |
| Employer Use of Credit Reports(CT Employer Credit Check Law) | Connecticut | Conn. Gen. Stat. 31-51tt | In force | Employees, Credit reporting | Verified 2026-09-25 |
| Genetic Information and Automated Decision Tools in Employment (Fair Employment Practices Act)(CT Employment Genetic Info) | Connecticut | Conn. Gen. Stat. 46a-60(b)(11); 46a-60(b) as amended by P.A. 26-15, s. 13 | In force | Employees, Genetic, Artificial intelligence | Verified 2026-09-25 |
| Genetic Information in Insurance (genetic discrimination and DTC test data)(CT Insurance Genetic Privacy) | Connecticut | Conn. Gen. Stat. 38a-816(20); 38a-833 | In force | Genetic, Health, Financial | Verified 2026-09-25 |
| Insurance Data Security Law(CT Insurance Data Security Law) | Connecticut | Conn. Gen. Stat. 38a-38 (P.A. 19-117, s. 230, as amended) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Online Services, Products or Features Offered to Minors (heightened-risk duty of care)(CT Minors Online Services) | Connecticut | Conn. Gen. Stat. 42-529 to 42-529e (ch. 743jj, part II); enacted by P.A. 23-56, ss. 8-13; amended by P.A. 25-113, ss. 14-18 | In force | Children, Location, Artificial intelligence | Verified 2026-09-25 |
| Patient Access to Medical Records and Test Results(CT Medical Records Access) | Connecticut | Conn. Gen. Stat. 20-7b to 20-7e | In force | Health | Verified 2026-09-25 |
| Recording of Private Telephone Conversations (all-party consent, civil action)(CT Telephone Recording Consent) | Connecticut | Conn. Gen. Stat. 52-570d | In force | Communications | Verified 2026-09-25 |
| Reproductive and Gender-Affirming Health Information Shield (covered entity disclosure limits)(CT Reproductive Health Info Shield) | Connecticut | Conn. Gen. Stat. 52-146w, 52-146x | In force | Health | Verified 2026-09-25 |
| Safeguarding of Personal Information; SSN Privacy Protection Policy; Secure Retention of Employment Applications(CT Data Safeguards & Disposal) | Connecticut | Conn. Gen. Stat. 42-471, 42-471a | In force | Data security, Employees | Verified 2026-09-25 |
| Security Freeze on Credit Reports(CT Security Freeze) | Connecticut | Conn. Gen. Stat. 36a-701 to 36a-701a | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Social Media Platforms and Minors (account unpublish/deletion; online safety center)(CT Social Media Minors) | Connecticut | Conn. Gen. Stat. 42-528 (P.A. 23-56, s. 7, amended by P.A. 25-113, s. 13); 42-530 (P.A. 25-113, s. 4) | In force | Children | Verified 2026-09-25 |
| Social Security Number Protection(CT SSN Protection) | Connecticut | Conn. Gen. Stat. 42-470 | In force | Data security | Verified 2026-09-25 |
| Student Data Privacy (Act Concerning Student Data Privacy)(CT Student Data Privacy) | Connecticut | Conn. Gen. Stat. 10-234aa to 10-234gg (P.A. 16-189, as amended by P.A. 17-200 and 18-125) | In force | Students, Children, Breach notification, Data security | Verified 2026-09-25 |
| Surveillance Pricing and Price-Setting Device Disclosure (P.A. 26-64, s. 11)(CT Surveillance Pricing) | Connecticut | P.A. 26-64, s. 11 (not yet codified) | Enacted, not yet in force | Other, Artificial intelligence | Verified 2026-09-25 |
| Telemarketing and Do-Not-Call Law (including text messages)(CT Telemarketing / Do Not Call) | Connecticut | Conn. Gen. Stat. 42-284 to 42-289 (ch. 743m) | In force | Marketing, Communications | Verified 2026-09-25 |
| Unsolicited Fax, Recorded Telephone Messages and Commercial Email(CT Unsolicited Fax & Email) | Connecticut | Conn. Gen. Stat. 52-570c | In force | Marketing, Communications | Verified 2026-09-25 |
| Clean Credit and Identity Theft Prevention Act (security freezes)(DE Security Freeze Law) | Delaware | 6 Del. C. §§ 2201 to 2205 (Title 6, Chapter 22) | In force | Credit reporting, Financial, Children | Verified 2026-09-25 |
| Compensation History Inquiry Ban(DE Salary History Ban) | Delaware | 19 Del. C. § 709B | In force | Employees | Verified 2026-09-25 |
| Computer Crimes: Misuse of Computer System Information (private personal data)(DE Computer Data Misuse) | Delaware | 11 Del. C. §§ 931, 935, 939, 941 | In force | Data security, Other | Verified 2026-09-25 |
| Computer Crimes: Unrequested Commercial Email and Failure to Cease Email on Request(DE Commercial Email Law) | Delaware | 11 Del. C. §§ 937, 938, 939, 941 | In force | Marketing, Communications | Verified 2026-09-25 |
| Computer Security Breaches (data security and breach notification)(DE Breach Law) | Delaware | 6 Del. C. §§ 12B-100 to 12B-104 (Title 6, Chapter 12B) | In force | Breach notification, Data security | Verified 2026-09-25 |
| Delaware Discrimination in Employment Act: genetic information provisions(DDEA Genetic Information) | Delaware | 19 Del. C. § 711(a), (f); § 710(11) | In force | Employees, Genetic | Verified 2026-09-25 |
| Delaware Online Privacy and Protection Act(DOPPA) | Delaware | 6 Del. C. §§ 1201C to 1206C (Title 6, Chapter 12C) | In force | Children, Marketing, Other | Verified 2026-09-25 |
| Delaware Personal Data Privacy Act(DPDPA) | Delaware | 6 Del. C. §§ 12D-101 to 12D-111 (Title 6, Chapter 12D) | In force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location, Artificial intelligence | Verified 2026-09-25 |
| Delaware Telemarketing Fraud Act (Telemarketing Registration and Fraud Prevention)(DE Telemarketing Fraud Act) | Delaware | 6 Del. C. §§ 2501A to 2510A (Title 6, Chapter 25A) | In force | Marketing | Verified 2026-09-25 |
| Delaware Uniform Civil Remedies for Unauthorized Disclosure of Intimate Images Act(DUCRUDIIA) | Delaware | 10 Del. C. §§ 7801 to 7806 (Title 10, Chapter 78) | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Education Privacy Act (student social media and device privacy in higher education)(DE Education Privacy Act) | Delaware | 14 Del. C. §§ 8101 to 8105 (Title 14, Chapter 81) | In force | Students | Verified 2026-09-25 |
| Employer Use of Social Media(DE Employee Social Media Privacy) | Delaware | 19 Del. C. § 709A | In force | Employees | Verified 2026-09-25 |
| Genetic Information (informed consent and confidentiality)(DE Genetic Privacy Law) | Delaware | 16 Del. C. §§ 1201 to 1208 (Title 16, Chapter 12, Subchapter I) | In force | Genetic, Health | Verified 2026-09-25 |
| Genetics-Based Discrimination Prohibited (health insurance, life insurance and annuities)(DE Insurance Genetic Nondiscrimination) | Delaware | 18 Del. C. §§ 2317, 2317A | In force | Genetic, Health, Financial | Verified 2026-09-25 |
| HIV Testing and Counseling (consent and confidentiality)(DE HIV Test Confidentiality) | Delaware | 16 Del. C. §§ 714 to 718 (Title 16, Chapter 7, Subchapter II) | In force | Health | Verified 2026-09-25 |
| HIV Testing for Insurance Act(DE HIV Testing for Insurance Act) | Delaware | 18 Del. C. §§ 7401 to 7405 (Title 18, Chapter 74) | In force | Health, Financial | Verified 2026-09-25 |
| Insurance Data Security Act(DE Insurance Data Security Act) | Delaware | 18 Del. C. §§ 8601 to 8611 (Title 18, Chapter 86) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Notice of Monitoring of Telephone Transmissions, Electronic Mail and Internet Usage(DE Employee Monitoring Notice) | Delaware | 19 Del. C. § 705 | In force | Employees, Communications | Verified 2026-09-25 |
| Polygraph and Lie Detector Test Prohibition(DE Polygraph Ban) | Delaware | 19 Del. C. § 704 | In force | Employees | Verified 2026-09-25 |
| Privacy Act Governing the Release of Motor Vehicle Driving History and License Records(DE Driver Privacy Act) | Delaware | 21 Del. C. § 305 | In force | Government records, Other | Verified 2026-09-25 |
| Safe Destruction of Records Containing Personal Identifying Information(DE Records Destruction Law) | Delaware | 6 Del. C. §§ 5001C to 5004C (Title 6, Chapter 50C) | In force | Data security | Verified 2026-09-25 |
| Student Data Privacy Protection Act(SDPPA) | Delaware | 14 Del. C. §§ 8101A to 8106A (Title 14, Chapter 81A) | In force | Students, Children, Data security, Marketing | Verified 2026-09-25 |
| Use of Credit Information in Personal Insurance(DE Insurance Credit Scoring Law) | Delaware | 18 Del. C. §§ 8301 to 8312 (Title 18, Chapter 83) | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Use of Deep Fake Technology to Influence an Election(DE Election Deep Fake Law) | Delaware | 15 Del. C. § 5145 | In force | Artificial intelligence | Verified 2026-09-25 |
| Violation of Privacy (criminal)(DE Violation of Privacy) | Delaware | 11 Del. C. § 1335 | In force | Communications, Location, Artificial intelligence, Other | Verified 2026-09-25 |
| Wiretapping, Electronic Surveillance and Interception of Communications; Stored Wire and Electronic Communications(DE Wiretap Act) | Delaware | 11 Del. C. §§ 2401 to 2412 (subch. I) and §§ 2421 to 2427 (subch. II) | In force | Communications | Verified 2026-09-25 |
| Age Verification for Online Access to Materials Harmful to Minors; Anonymous Age Verification(Florida Age Verification Law) | Florida | Fla. Stat. 501.1737-501.1738 | In force | Children, Data security | Verified 2026-09-25 |
| Altered Sexual Depictions; Brooke's Law (platform notice-and-removal)(Florida Altered Sexual Depictions Law (Brooke's Law)) | Florida | Fla. Stat. 836.13 | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Confidentiality of Financial Institution Books and Records(Florida Bank Records Confidentiality Law) | Florida | Fla. Stat. 655.059 | In force | Financial | Verified 2026-09-25 |
| Consumer Report Security Freeze(Florida Security Freeze Law) | Florida | Fla. Stat. 501.005 | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Digital Voyeurism(Florida Digital Voyeurism Law) | Florida | Fla. Stat. 810.145 | In force | Other | Verified 2026-09-25 |
| Drug-Free Workplace Program: Confidentiality of Employee Drug Test Information(Florida Drug-Free Workplace Confidentiality) | Florida | Fla. Stat. 440.102 | In force | Employees, Health | Verified 2026-09-25 |
| Education Records of K-12 Students; Limits on Collection of Student Information(Florida K-12 Education Records Law) | Florida | Fla. Stat. 1002.22; 1002.222 | In force | Students, Biometric, Government records | Verified 2026-09-25 |
| Electronic Mail Communications Act (commercial e-mail)(Florida Electronic Mail Communications Act) | Florida | Fla. Stat. 668.60-668.610 | In force | Marketing | Verified 2026-09-25 |
| Florida Consumer Collection Practices Act: Privacy-Related Prohibited Practices(FCCPA) | Florida | Fla. Stat. 559.55-559.785 (privacy provisions in 559.72) | In force | Financial, Communications | Verified 2026-09-25 |
| Florida Digital Bill of Rights(FDBR) | Florida | Fla. Stat. ch. 501, part V (ss. 501.701-501.722) | In force | Comprehensive privacy, Children, Biometric, Location | Verified 2026-09-25 |
| Florida Electronic Health Records Exchange Act: Offshore Storage Restriction and Emergency Release(Florida EHR Data Localization Law) | Florida | Fla. Stat. 408.051(3)-(4) | In force | Health, Data security | Verified 2026-09-25 |
| Florida Information Protection Act of 2014(FIPA) | Florida | Fla. Stat. 501.171 | In force | Breach notification, Data security, Biometric, Location | Verified 2026-09-25 |
| Florida Telemarketing Act(Florida Telemarketing Act) | Florida | Fla. Stat. 501.601-501.626 | In force | Marketing | Verified 2026-09-25 |
| Florida Telephone Solicitation Act (including the 'mini-TCPA' autodialer rule)(FTSA) | Florida | Fla. Stat. 501.059 | In force | Marketing, Communications | Verified 2026-09-25 |
| Freedom from Unwarranted Surveillance Act (drones)(Florida Drone Surveillance Law) | Florida | Fla. Stat. 934.50 | In force | Government records, Other | Verified 2026-09-25 |
| Genetic Information for Insurance Purposes(Florida Insurance Genetic Privacy Law) | Florida | Fla. Stat. 627.4301 | In force | Genetic, Health | Verified 2026-09-25 |
| Genetic Testing; Express Consent; Confidentiality (DNA analysis)(Florida Genetic Privacy Law) | Florida | Fla. Stat. 760.40 | In force | Genetic | Verified 2026-09-25 |
| HIV Testing: Informed Consent and Confidentiality of Results(Florida HIV Test Confidentiality Law) | Florida | Fla. Stat. 381.004 | In force | Health | Verified 2026-09-25 |
| Hospital Patient Records; Confidentiality(Florida Hospital Records Law) | Florida | Fla. Stat. 395.3025 | In force | Health | Verified 2026-09-25 |
| Installation or Use of Tracking Devices or Tracking Applications(Florida Tracking Device Law) | Florida | Fla. Stat. 934.425 | In force | Location | Verified 2026-09-25 |
| Insurance Privacy of Nonpublic Personal Financial and Health Information(Florida Insurance Privacy Law) | Florida | Fla. Stat. 626.9651 | In force | Financial, Health | Verified 2026-09-25 |
| Laboratory Genetic Sequencing Software from Foreign Countries of Concern(Florida Genetic Sequencing Software Law) | Florida | Fla. Stat. 381.0202(5) | In force | Genetic, Data security, Government records | Verified 2026-09-25 |
| Mental Health Clinical Records; Confidentiality (Baker Act facilities)(Florida Mental Health Records Law) | Florida | Fla. Stat. 394.4615 | In force | Health | Verified 2026-09-25 |
| Ownership and Control of Patient Records; Confidentiality (health care practitioners)(Florida Patient Records Law) | Florida | Fla. Stat. 456.057 | In force | Health | Verified 2026-09-25 |
| Protected Consumer Report Security Freeze (minors under 16 and represented persons)(Florida Protected Consumer Freeze Law) | Florida | Fla. Stat. 501.0051 | In force | Credit reporting, Children, Financial | Verified 2026-09-25 |
| Protecting DNA Privacy Act: Unlawful Use of DNA(Florida DNA Privacy Act) | Florida | Fla. Stat. 817.5655 | In force | Genetic | Verified 2026-09-25 |
| Protection of Children in Online Spaces(Florida Children in Online Spaces Law) | Florida | Fla. Stat. 501.1735 | In force | Children, Location | Verified 2026-09-25 |
| Restrictions on Information Printed on Payment-Card Receipts(Florida Card Receipt Law) | Florida | Fla. Stat. 501.0118 | In force | Financial, Data security | Verified 2026-09-25 |
| Security of Communications Act: Interception and Disclosure of Wire, Oral, or Electronic Communications (all-party consent)(Florida Wiretap Act) | Florida | Fla. Stat. 934.02-934.10 | In force | Communications | Verified 2026-09-25 |
| Sexual Cyberharassment (nonconsensual intimate images)(Florida Sexual Cyberharassment Law) | Florida | Fla. Stat. 784.049 | In force | Other | Verified 2026-09-25 |
| Social Media Use for Minors (HB 3, 2024)(Florida HB 3 Social Media) | Florida | Fla. Stat. 501.1736 | In force | Children | Verified 2026-09-25 |
| Student Online Personal Information Protection Act(Florida SOPIPA) | Florida | Fla. Stat. 1006.1494 | In force | Students, Children | Verified 2026-09-25 |
| Unlawful Access to Stored Communications(Florida Stored Communications Law) | Florida | Fla. Stat. 934.21 | In force | Communications | Verified 2026-09-25 |
| Use of Artificial Intelligence in Political Advertising(Florida AI Political Ad Disclaimer Law) | Florida | Fla. Stat. 106.145 | In force | Artificial intelligence | Verified 2026-09-25 |
| Age Verification for Internet Sites Containing Content Pornographic for Minors (2026 HF 864)(Iowa Age Verification Law) | Iowa | 2026 Iowa Acts ch. 1143 (HF 864), enacting new Iowa Code ch. 554J (554J.1 to 554J.5 as enacted; final Code numbering pending) | In force | Children, Data security | Verified 2026-09-25 |
| Computer Spyware, Malware, and Ransomware Protection(Iowa Spyware Law) | Iowa | Iowa Code ch. 715 (715.1 to 715.11) | In force | Data security, Other | Verified 2026-09-25 |
| Consumer Credit Security (security freeze law)(Iowa Security Freeze Law) | Iowa | Iowa Code ch. 714G (714G.1 to 714G.11) | In force | Credit reporting, Financial, Children | Verified 2026-09-25 |
| Conversational Artificial Intelligence Services Act (2026 SF 2417)(Iowa Conversational AI Act) | Iowa | 2026 Iowa Acts ch. 1068 (SF 2417), enacting new Iowa Code ch. 554J (554J.1 to 554J.6 as enacted; final Code numbering pending) | Enacted, not yet in force | Artificial intelligence, Children, Health | Verified 2026-09-25 |
| Disclosure of Mental Health and Psychological Information(Iowa Mental Health Information Law) | Iowa | Iowa Code ch. 228 (228.1 to 228.9) | In force | Health | Verified 2026-09-25 |
| Electronic and Mechanical Eavesdropping(Iowa Eavesdropping Law) | Iowa | Iowa Code 727.8 | In force | Communications | Verified 2026-09-25 |
| Electronic Mail (unsolicited bulk email law)(Iowa Anti-Spam Law) | Iowa | Iowa Code ch. 716A (716A.1 to 716A.7) | In force | Marketing, Communications | Verified 2026-09-25 |
| Electronic Protected Health Information of Minor: Disclosure to Legal Guardian(Iowa Minor ePHI Guardian Access Law) | Iowa | Iowa Code 135.194 | In force | Health, Children | Verified 2026-09-25 |
| Genetic Testing (employment, consent, and health insurance protections)(Iowa Genetic Testing Law) | Iowa | Iowa Code 729.6 | In force | Genetic, Employees, Health, Financial | Verified 2026-09-25 |
| Harassment by Nonconsensual Dissemination of Nude or Sexual Visual Depictions (including digitally created depictions)(Iowa Criminal NCII and Deepfake Law) | Iowa | Iowa Code 708.7(1)(a)(5), (2) | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| HIV-Related Test Confidentiality(Iowa HIV Confidentiality Law) | Iowa | Iowa Code 141A.9 and 141A.11 (ch. 141A) | In force | Health | Verified 2026-09-25 |
| Identity Theft: Civil Cause of Action(Iowa Identity Theft Civil Remedy) | Iowa | Iowa Code 714.16B (with 715A.8, identity theft offense) | In force | Financial, Other | Verified 2026-09-25 |
| Insurance Data Security Act(Iowa Insurance Data Security Act) | Iowa | Iowa Code ch. 507F (507F.1 to 507F.16) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Interception of Communications (Iowa wiretap act)(Iowa Wiretap Act) | Iowa | Iowa Code ch. 808B (808B.1 to 808B.14) | In force | Communications | Verified 2026-09-25 |
| Iowa Consumer Data Protection Act (Consumer Data Protections)(ICDPA) | Iowa | Iowa Code ch. 715D (715D.1 to 715D.9) | In force | Comprehensive privacy, Children, Biometric, Genetic, Location, Data security | Verified 2026-09-25 |
| Malicious Sharing of Personal Information of a General Assembly Member or Judicial Officer (2026 SF 2280, Division III)(Iowa Official Doxxing Law) | Iowa | Iowa Code 708.18 (new section enacted by 2026 Iowa Acts ch. 1077, s. 8) | In force | Other, Location | Verified 2026-09-25 |
| Personal Information Security Breach Protection(Iowa Breach Notification Law) | Iowa | Iowa Code ch. 715C (715C.1 to 715C.2) | In force | Breach notification, Data security, Biometric | Verified 2026-09-25 |
| Personnel Information: Employee Access to Personnel Files(Iowa Personnel File Access Law) | Iowa | Iowa Code 91B.1 | In force | Employees | Verified 2026-09-25 |
| Polygraph Examination Prohibited (employment)(Iowa Employee Polygraph Protection Law) | Iowa | Iowa Code 730.4 | In force | Employees | Verified 2026-09-25 |
| Privacy of Consumer Financial and Health Information (Iowa Insurance Division rules)(Iowa Insurance Privacy Rule) | Iowa | Iowa Admin. Code r. 191-90.1 to 191-90.40 (implementing Iowa Code 505.8(6) and GLBA Title V) | In force | Financial, Health, Data security | Verified 2026-09-25 |
| Private Sector Drug-Free Workplaces (employee drug and alcohol testing)(Iowa Workplace Drug Testing Law) | Iowa | Iowa Code 730.5 | In force | Employees, Health | Verified 2026-09-25 |
| Proof of Vaccination for COVID-19(Iowa COVID-19 Vaccine Proof Ban) | Iowa | Iowa Code ch. 27C (27C.1 to 27C.2; enacted as 27B.1 to 27B.2 by 2021 Acts ch. 141) | In force | Health, Government records | Verified 2026-09-25 |
| Remotely Piloted Aircraft (drone intrusion and surveillance)(Iowa Drone Surveillance Law) | Iowa | Iowa Code ch. 715E (715E.1 to 715E.6; enacted as 715D.1 to 715D.6 by 2024 Acts ch. 1131) | In force | Other, Location | Verified 2026-09-25 |
| Student Online Personal Information Protection(Iowa Student Online Privacy Law) | Iowa | Iowa Code 279.71 (enacted as 279.70 by 2018 Acts ch. 1042) | In force | Students, Children, Data security, Marketing | Verified 2026-09-25 |
| Tort Liability for Cybersecurity Programs (cybersecurity safe harbor)(Iowa Cybersecurity Safe Harbor) | Iowa | Iowa Code ch. 554G (554G.1 to 554G.4) | In force | Data security, Breach notification | Verified 2026-09-25 |
| Unauthorized Placement of Global Positioning Device; Stalking by Technological Device(Iowa GPS Tracking Law) | Iowa | Iowa Code 708.11A; Iowa Code 708.11(1)(b), (1)(e) | In force | Location, Other | Verified 2026-09-25 |
| Uniform Civil Remedies for Unauthorized Disclosure of Intimate Images Act(Iowa Intimate Images Civil Remedy Act) | Iowa | Iowa Code ch. 659A (659A.1 to 659A.9) | In force | Other | Verified 2026-09-25 |
| Age Verification for Adult Oriented Websites(IN Adult Website Age Verification) | Indiana | Ind. Code ch. 24-4-23 (IC 24-4-23-1 to 24-4-23-17) | In force | Children, Data security | Verified 2026-09-25 |
| Automatic Dialing-Announcing Devices (autodialer and prerecorded message restrictions)(IN Autodialer Law) | Indiana | Ind. Code ch. 24-5-14 (IC 24-5-14-1 to 24-5-14-13) | In force | Marketing | Verified 2026-09-25 |
| Caller Identification Spoofing(IN Caller ID Spoofing) | Indiana | Ind. Code ch. 24-5-14.5 (IC 24-5-14.5-1 to 24-5-14.5-14) | In force | Communications, Marketing | Verified 2026-09-25 |
| Communicable Disease: Confidentiality Requirements(IN Communicable Disease Confidentiality) | Indiana | Ind. Code ch. 16-41-8 (IC 16-41-8-0.2 to 16-41-8-6 and following) | In force | Health | Verified 2026-09-25 |
| Consumer Genetic Testing Providers(IN Consumer Genetic Testing) | Indiana | Ind. Code ch. 24-4-24 (IC 24-4-24-1 to 24-4-24-11) | In force | Genetic | Verified 2026-09-25 |
| Deceptive Commercial Electronic Mail(IN Commercial Email) | Indiana | Ind. Code ch. 24-5-22 (IC 24-5-22-1 to 24-5-22-10) | In force | Marketing | Verified 2026-09-25 |
| Disclosure of Nonpublic Personal Financial Information (insurance)(IN Insurance NPI Privacy) | Indiana | Ind. Code ch. 27-2-20 (IC 27-2-20-1 to 27-2-20-4) | In force | Financial | Verified 2026-09-25 |
| Disclosure of Security Breach (data breach notification and data security)(IN Breach Notification) | Indiana | Ind. Code art. 24-4.9 (IC 24-4.9-1-1 to 24-4.9-5-1) | In force | Breach notification, Data security | Verified 2026-09-25 |
| Downcoding of Health Benefits Claims (AI use limits and disclosure)(IN Health Claims AI Disclosure) | Indiana | Ind. Code ch. 27-1-52 (IC 27-1-52-0.3 to 27-1-52-14); AI provisions at IC 27-1-52-9 | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Fabricated Media in Campaign Communications (election deepfake disclosure)(IN Election Deepfake Disclosure) | Indiana | Ind. Code ch. 3-9-8 (IC 3-9-8-1 to 3-9-8-6) | In force | Artificial intelligence | Verified 2026-09-25 |
| Genetic Discrimination (consumer genetic testing)(IN Genetic Testing Nondiscrimination) | Indiana | Ind. Code ch. 22-9-14 (IC 22-9-14-1 to 22-9-14-2) | In force | Genetic | Verified 2026-09-25 |
| Genetic Screening or Testing (health insurance)(IN Insurance Genetic Testing) | Indiana | Ind. Code ch. 27-8-26 (IC 27-8-26-0.1 to 27-8-26-11) | In force | Genetic, Health | Verified 2026-09-25 |
| Health Records (patient access, confidentiality, and retention)(IN Health Records) | Indiana | Ind. Code art. 16-39 (IC 16-39-0.1-1 to 16-39-11) | In force | Health | Verified 2026-09-25 |
| Health Records and Identifying Information Protection (abandoned records)(IN Abandoned Records) | Indiana | Ind. Code ch. 4-6-14 (IC 4-6-14-1 to 4-6-14-15) | In force | Health, Data security | Verified 2026-09-25 |
| Identity Deception (criminal identity theft)(IN Identity Deception) | Indiana | Ind. Code 35-43-5-3.5 | In force | Financial, Other | Verified 2026-09-25 |
| Identity Theft (duties to identity theft victims)(IN Identity Theft Victim Protections) | Indiana | Ind. Code ch. 24-5-26 (IC 24-5-26-1 to 24-5-26-3) | In force | Financial | Verified 2026-09-25 |
| Indiana Consumer Data Protection Act(INCDPA) | Indiana | Ind. Code art. 24-15 (IC 24-15-1-1 to 24-15-11-2) | In force | Comprehensive privacy | Verified 2026-09-25 |
| Insurance Data Security(IN Insurance Data Security) | Indiana | Ind. Code ch. 27-2-27 (IC 27-2-27-1 to 27-2-27-32) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Interception of Telephonic or Telegraphic Communications (Indiana wiretap act)(IN Wiretap Act) | Indiana | Ind. Code art. 35-33.5 (IC 35-33.5-1-1 to 35-33.5-5-6); definition of 'interception' at IC 35-31.5-2-176 | In force | Communications | Verified 2026-09-25 |
| Nonconsensual Intimate Images (criminal distribution and civil action), including AI-generated images(IN Intimate Image Law) | Indiana | Ind. Code 35-45-4-8 (crime); Ind. Code art. 34-21.5 (civil action) | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Off Duty Use of Tobacco by Employee(IN Off-Duty Tobacco Use) | Indiana | Ind. Code ch. 22-5-4 (IC 22-5-4-1 to 22-5-4-4) | In force | Employees | Verified 2026-09-25 |
| Parental Access to Student Records (education records disclosures)(IN Student Records Access) | Indiana | Ind. Code ch. 20-33-7 (IC 20-33-7-1 to 20-33-7-5) | In force | Students | Verified 2026-09-25 |
| Persons Holding a Customer's Personal Information (disposal of customer records)(IN Customer Data Disposal) | Indiana | Ind. Code ch. 24-4-14 (IC 24-4-14-1 to 24-4-14-8) | In force | Data security | Verified 2026-09-25 |
| Privacy and Disclosure of Bureau of Motor Vehicles Records(IN BMV Records Privacy) | Indiana | Ind. Code ch. 9-14-13 (IC 9-14-13-1 to 9-14-13-12) | In force | Government records | Verified 2026-09-25 |
| Privacy of Firearms Financial Transactions(IN Firearms Transaction Privacy) | Indiana | Ind. Code ch. 24-5-27.5 (IC 24-5-27.5-1 to 24-5-27.5-25) | In force | Financial | Verified 2026-09-25 |
| Prohibited Spyware(IN Spyware Act) | Indiana | Ind. Code art. 24-4.8 (IC 24-4.8-1-1 to 24-4.8-3-2) | In force | Other, Communications | Verified 2026-09-25 |
| Prohibition Against Requiring the Implantation of Devices (employee microchipping)(IN Employee Implant Ban) | Indiana | Ind. Code ch. 22-5-8 (IC 22-5-8-1 to 22-5-8-4) | In force | Employees | Verified 2026-09-25 |
| Rights of Publicity(IN Right of Publicity) | Indiana | Ind. Code ch. 32-36-1 (IC 32-36-1-0.2 to 32-36-1-20) | In force | Other | Verified 2026-09-25 |
| Security Freezes for Consumer Reports(IN Security Freeze) | Indiana | Ind. Code ch. 24-5-24 (IC 24-5-24-1 to 24-5-24-17) | In force | Credit reporting | Verified 2026-09-25 |
| Security Freezes for Protected Consumers (minors under 16 and incapacitated persons)(IN Protected Consumer Freeze) | Indiana | Ind. Code ch. 24-5-24.5 (IC 24-5-24.5-1 to 24-5-24.5-19) | In force | Credit reporting, Children | Verified 2026-09-25 |
| Social Media Providers: Adolescent Use of Social Media(IN Social Media Minors Act) | Indiana | Ind. Code art. 24-16 (IC 24-16-1-1 to 24-16-6-1) | Enacted, not yet in force | Children | Verified 2026-09-25 |
| Student Personal Analysis, Evaluation, or Survey (third-party vendor surveys)(IN Student Survey Privacy) | Indiana | Ind. Code ch. 20-26-21 (IC 20-26-21-1 to 20-26-21-9) | In force | Students | Verified 2026-09-25 |
| Telephone Solicitation of Consumers (Indiana Do Not Call list)(IN Do Not Call) | Indiana | Ind. Code art. 24-4.7 (IC 24-4.7-1-1 to 24-4.7-5-6) | In force | Marketing | Verified 2026-09-25 |
| Telephone Solicitations (seller registration and caller ID blocking)(IN Telephone Seller Registration) | Indiana | Ind. Code ch. 24-5-12 (IC 24-5-12-0.1 to 24-5-12-25) | In force | Marketing | Verified 2026-09-25 |
| Unlawful Photography, Surveillance, and Tracking on Private Property(IN Unlawful Surveillance and Tracking) | Indiana | Ind. Code 35-46-8.5-1 | In force | Location, Other | Verified 2026-09-25 |
| Use of Credit Information (personal insurance)(IN Insurance Credit Scoring) | Indiana | Ind. Code ch. 27-2-21 (IC 27-2-21-0.1 to 27-2-21-23) | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Voyeurism, Public Voyeurism, and Remote Aerial Voyeurism(IN Voyeurism) | Indiana | Ind. Code 35-45-4-5 | In force | Other | Verified 2026-09-25 |
| Age Verification for Online Matter Harmful to Minors(KY Adult Site Age Verification) | Kentucky | KRS 436.001 to 436.009 (created 2024 Ky. Acts ch. 106, secs. 13-18, HB 278) | In force | Children, Other | Verified 2026-09-25 |
| Automated Calling Equipment Restrictions(KY Autodialer Law) | Kentucky | KRS 367.461 to 367.469 (created 1992 Ky. Acts ch. 32; amended 2020 Ky. Acts ch. 71) | In force | Marketing, Communications | Verified 2026-09-25 |
| Automated License Plate Reader Restrictions(KY ALPR Law) | Kentucky | KRS 189.632; KRS 189.990(33) (created 2026 Ky. Acts ch. 71, HB 58) | In force | Location, Government records, Financial | Verified 2026-09-25 |
| Commercial Use of Booking Photographs Prohibited(KY Mugshot Removal-Fee Ban) | Kentucky | KRS 61.8746 (created 2016 Ky. Acts ch. 101) | In force | Government records, Other | Verified 2026-09-25 |
| Consumer Report Security Freeze Law (including protected persons)(KY Security Freeze) | Kentucky | KRS 367.363 to 367.365 (created 2006 Ky. Acts ch. 42; KRS 367.3645 created 2017 Ky. Acts ch. 119; amended 2018 Ky. Acts ch. 41) | In force | Credit reporting, Financial, Children | Verified 2026-09-25 |
| Consumer Reporting Agency Records Restriction (criminal charges without conviction)(KY CRA Criminal Charge Restriction) | Kentucky | KRS 367.310 (created 1980 Ky. Acts ch. 49) | In force | Credit reporting | Verified 2026-09-25 |
| Destruction of Customer Records Containing Personally Identifiable Information(KY Records Disposal) | Kentucky | KRS 365.720 to 365.730 (enacted 2006 Ky. Acts ch. 42) | In force | Data security | Verified 2026-09-25 |
| Distribution of Sexually Explicit Images Without Consent and Civil Takedown Remedy(KY Nonconsensual Intimate Images) | Kentucky | KRS 531.120; KRS 411.215 (created 2018 Ky. Acts ch. 50) | In force | Other | Verified 2026-09-25 |
| Genetic Test Protections in Health and Disability Insurance(KY Insurance Genetic Testing) | Kentucky | KRS 304.12-085(2)-(5) (amended 1998 Ky. Acts ch. 496, sec. 55) | In force | Genetic, Health | Verified 2026-09-25 |
| HIV Testing Consent and Test Result Confidentiality(KY HIV Confidentiality) | Kentucky | KRS 214.181; KRS 214.625; KRS 214.995 (created 1990 Ky. Acts chs. 443 and 495; amended through 2019 Ky. Acts ch. 134) | In force | Health | Verified 2026-09-25 |
| Kentucky Consumer Data Protection Act(KCDPA) | Kentucky | KRS 367.3611 to 367.3629 (enacted 2024 Ky. Acts ch. 72, HB 15; amended 2025 Ky. Acts ch. 13, HB 473; 2026 Ky. Acts ch. 118, HB 692) | In force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Kentucky Eavesdropping and Related Offenses(KY Eavesdropping) | Kentucky | KRS 526.010 to 526.080 (enacted 1974 Ky. Acts ch. 406, Kentucky Penal Code) | In force | Communications | Verified 2026-09-25 |
| Kentucky Family Educational Rights and Privacy Act (student education records)(KY FERPA) | Kentucky | KRS 160.700 to 160.730 (created 1994 Ky. Acts ch. 98; KRS 160.705 amended 2013 Ky. Acts ch. 14) | In force | Students, Children, Government records | Verified 2026-09-25 |
| Kentucky Insurance Data Security Law(KY Insurance Data Security) | Kentucky | KRS 304.3-750 to 304.3-768 (created 2022 Ky. Acts ch. 149, HB 474) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Kentucky Security Breach Notification Law(KY Breach Notification) | Kentucky | KRS 365.732 (enacted 2014 Ky. Acts ch. 84, HB 232) | In force | Breach notification | Verified 2026-09-25 |
| Kentucky Telephone Solicitation (Telemarketing) Law(KY Telemarketing Act) | Kentucky | KRS 367.46951 to 367.46999 (created 1994 Ky. Acts chs. 302 and 463; amended through 2019 Ky. Acts ch. 105) | In force | Marketing, Communications | Verified 2026-09-25 |
| Personal Information Security and Breach Investigation Law for Public Agencies and Nonaffiliated Third Parties(KY Public Agency / Vendor Data Security (HB 5)) | Kentucky | KRS 61.931 to 61.934 (created 2014 Ky. Acts ch. 74) | In force | Data security, Breach notification, Government records, Biometric, Genetic, Health | Verified 2026-09-25 |
| Student Data Protections for Cloud Computing Service Providers(KY Student Cloud Data) | Kentucky | KRS 365.734 (enacted 2014 Ky. Acts ch. 84, sec. 2) | In force | Students, Children | Verified 2026-09-25 |
| Synthetic Media in Electioneering Communications(KY Election Deepfake Disclosure) | Kentucky | KRS 117.322; KRS 117.001 (definitions) (created 2025 Ky. Acts ch. 66, SB 4; amended 2026 Ky. Acts ch. 161) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Theft of Identity and Trafficking in Stolen Identities (criminal offense and civil action)(KY Identity Theft) | Kentucky | KRS 514.160; KRS 514.170; KRS 411.210 (created 2000 Ky. Acts ch. 174; amended 2002 Ky. Acts ch. 175) | In force | Data security, Biometric, Other | Verified 2026-09-25 |
| Unmanned Aircraft System Privacy Restrictions(KY Drone Surveillance Law) | Kentucky | KRS 500.130; KRS 411.067 (created 2018 Ky. Acts ch. 26; amended and civil action added 2025 Ky. Acts ch. 19, HB 19) | In force | Location, Government records, Other | Verified 2026-09-25 |
| Voyeurism and Video Voyeurism(KY Voyeurism) | Kentucky | KRS 531.090 to 531.110 (created 2002 Ky. Acts chs. 149 and 336; amended 2014 Ky. Acts ch. 72) | In force | Other | Verified 2026-09-25 |
| Age verification for websites distributing material harmful to minors (civil liability and Attorney General enforcement)(LA Adult Website Age Verification) | Louisiana | La. R.S. 9:2800.29 (Acts 2022, No. 440); La. R.S. 51:2121 (Acts 2023, No. 216) | In force | Children, Data security | Verified 2026-09-25 |
| All Party Notification for In-Person Conversation (wearable eyeglass recording devices)(LA Smart Glasses Recording Law) | Louisiana | La. R.S. 9:2790.1 to 9:2790.4 (Acts 2026, No. 965, HB 410) | In force | Communications, Artificial intelligence | Verified 2026-09-25 |
| Allen Toussaint Legacy Act (right of publicity and digital replicas)(LA Allen Toussaint Legacy Act) | Louisiana | La. R.S. 51:470.1 to 51:470.6 (Acts 2022, No. 425) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Artificial intelligence disclosures in political calls and electioneering communications(LA AI Political Communications Disclosure) | Louisiana | La. R.S. 18:1463, 18:1463.1 (Acts 2026, No. 559, HB 639; Acts 2026, No. 806, HB 459) | In force | Artificial intelligence, Marketing | Verified 2026-09-25 |
| Confidentiality of bank customer financial records(LA Bank Financial Records Privacy) | Louisiana | La. R.S. 6:333 | In force | Financial | Verified 2026-09-25 |
| Credit reporting agency duties, security alerts, and security freezes(LA Credit Report and Security Freeze Law) | Louisiana | La. R.S. 9:3571.1; La. R.S. 9:3571.3 (protected persons) | In force | Credit reporting, Financial, Children | Verified 2026-09-25 |
| Database Security Breach Notification Law(LA DSBNL) | Louisiana | La. R.S. 51:3071 to 51:3077; La. Admin. Code tit. 16, pt. III, § 701 | In force | Breach notification, Data security, Biometric | Verified 2026-09-25 |
| Electronic Surveillance Act(LA Electronic Surveillance Act) | Louisiana | La. R.S. 15:1301 to 15:1318 | In force | Communications | Verified 2026-09-25 |
| Genetic information and privacy in employment(LA Employment Genetic Privacy) | Louisiana | La. R.S. 23:368 | In force | Genetic, Employees | Verified 2026-09-25 |
| Health insurance genetic information protections(LA Health Insurance Genetic Privacy) | Louisiana | La. R.S. 22:1023 | In force | Genetic, Health | Verified 2026-09-25 |
| Healthcare professional disclosure of AI transcription of patient encounters(LA AI Medical Transcription Disclosure) | Louisiana | La. R.S. 37:22.1 (Acts 2026, No. 649, HB 475) | In force | Health, Artificial intelligence | Verified 2026-09-25 |
| Identity theft victim rights (police reports and creditor records)(LA Identity Theft Victim Law) | Louisiana | La. R.S. 9:3568 (Acts 2003, No. 934) | In force | Financial, Credit reporting | Verified 2026-09-25 |
| Insurance Data Security Law(LA Insurance Data Security Law) | Louisiana | La. R.S. 22:2501 to 22:2511 (Acts 2020, No. 283) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Kids Online Protection and Anti-Grooming Act(LA KOPAG Act) | Louisiana | La. R.S. 9:2717.4 (Acts 2025, No. 236, HB 37; Acts 2026, No. 552, HB 427) | Enacted, not yet in force | Children, Location | Verified 2026-09-25 |
| Legal representative consent for contracts between a minor and an interactive computer service(LA Minor Online Contract Consent Law) | Louisiana | La. R.S. 9:2717.2 (Acts 2023, No. 440, HB 61; Acts 2024, No. 16, HB 123) | In force | Children | Verified 2026-09-25 |
| Life, long-term care, and annuity genetic nondiscrimination(LA Life and LTC Genetic Nondiscrimination) | Louisiana | La. R.S. 22:918 (Acts 2021, No. 242; Acts 2024, No. 224; Acts 2025, No. 244) | In force | Genetic | Verified 2026-09-25 |
| Louisiana Data Privacy Act(LDPA) | Louisiana | La. R.S. 51:1780.1 to 51:1780.5 (Acts 2026, No. 502, SB 386) | Enacted, not yet in force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Medical records disclosure rules (patient access and subpoenas to health care providers)(LA Medical Records Disclosure Rules) | Louisiana | La. R.S. 40:1165.1; La. R.S. 13:3715.1 | In force | Health | Verified 2026-09-25 |
| Personal Online Account Privacy Protection Act(LA POAPPA) | Louisiana | La. R.S. 51:1951 to 51:1955 (Acts 2014, No. 165) | In force | Employees, Students | Verified 2026-09-25 |
| Privacy of genetic test results(LA Genetic Test Confidentiality) | Louisiana | La. R.S. 40:1081.10 (formerly R.S. 40:1299.6) | In force | Genetic, Health | Verified 2026-09-25 |
| Protection of Children on Applications (Louisiana App Store Accountability Act)(LA App Store Act) | Louisiana | La. R.S. 51:1771 to 51:1775 (Acts 2026, No. 185, HB 977; replaces Acts 2025, No. 481, HB 570) | Enacted, not yet in force | Children, Data security | Verified 2026-09-25 |
| Protection of Children's Internet Data (social media targeted advertising and sale of minors' sensitive data)(LA Children's Internet Data Law) | Louisiana | La. R.S. 51:1761 to 51:1763 (Acts 2024, No. 656, HB 577) | In force | Children, Marketing, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Secure Online Child Interaction and Age Limitation Act(LA SOCIAL Act) | Louisiana | La. R.S. 51:1751 to 51:1759 (Acts 2023, No. 456; Acts 2024, No. 656) | Blocked by a court | Children | Verified 2026-09-25 |
| Student information privacy (personally identifiable student information)(LA Student Privacy Law) | Louisiana | La. R.S. 17:3914; La. R.S. 17:3913 (Acts 2014, No. 837 and No. 677) | In force | Students, Biometric, Data security | Verified 2026-09-25 |
| Telephone Solicitation Relief Act of 2001 (Louisiana Do Not Call)(LA Do Not Call Law) | Louisiana | La. R.S. 45:844.11 to 45:844.18 | In force | Marketing | Verified 2026-09-25 |
| Tracking device prohibition and vehicle remote-access suspension for abuse survivors(LA Location Tracking Protections) | Louisiana | La. R.S. 14:323; La. R.S. 46:2191 to 46:2196 (Acts 2025, No. 225, HB 74) | In force | Location | Verified 2026-09-25 |
| Unlawful deepfakes and AI-generated intimate images(LA AI Deepfake Image Crimes) | Louisiana | La. R.S. 14:73.13 (Acts 2023, No. 457); La. R.S. 14:73.14 (Acts 2024, No. 142); La. R.S. 14:73.14.1 (Acts 2026, No. 782) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Common ownership communities: sensitive information as a condition of access to recreational common areas(MD COC Sensitive Information Law) | Maryland | Md. Code, Real Prop. §§ 11-108.2 (condominiums), 11B-111.12 (homeowners associations); Corps. & Ass'ns § 5-6B-23.2 (cooperatives) | In force | Other | Verified 2026-09-25 |
| Facial recognition in job interviews(MD Facial Recognition Interview Law) | Maryland | Md. Code, Lab. & Empl. § 3-717 | In force | Employees, Biometric, Artificial intelligence | Verified 2026-09-25 |
| Genetic information in employment (Maryland Fair Employment Practices Act)(MD FEPA genetic provisions) | Maryland | Md. Code, State Gov't § 20-606 | In force | Genetic, Employees | Verified 2026-09-25 |
| Genetic information in insurance (health insurance genetic nondiscrimination and the Genetic Testing Protection Act)(MD Insurance Genetic Protections) | Maryland | Md. Code, Ins. §§ 27-909, 27-909.1 | In force | Genetic, Health | Verified 2026-09-25 |
| Health insurance utilization review: use of artificial intelligence(MD AI Utilization Review Law) | Maryland | Md. Code, Ins. §§ 15-10B-05.1, 15-10A-06 | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Identity fraud: artificial intelligence and deepfake representations(MD AI Deepfake Identity Fraud Law) | Maryland | Md. Code, Crim. Law § 8-301(f)(2), (h) (as amended by 2026 Md. Laws ch. 445) | Enacted, not yet in force | Artificial intelligence, Other | Verified 2026-09-25 |
| Job Applicant Fairness Act (employer use of credit history)(MD Job Applicant Fairness Act) | Maryland | Md. Code, Lab. & Empl. § 3-711 | In force | Employees, Credit reporting | Verified 2026-09-25 |
| Judge Andrew F. Wilkinson Judicial Security Act(Wilkinson Judicial Security Act) | Maryland | Md. Code, Cts. & Jud. Proc. §§ 3-2301 to 3-2304 (personal information of judges) and 3-2401 et seq. (Judicial Address Confidentiality Program) | In force | Government records, Other | Verified 2026-09-25 |
| Maryland Age-Appropriate Design Code Act (Maryland Kids Code)(Maryland Kids Code) | Maryland | Md. Code, Com. Law §§ 14-4801 to 14-4813 (enacted by 2024 Md. Laws chs. 460 and 461 as §§ 14-4601 to 14-4612, since renumbered) | In force | Children, Location | Verified 2026-09-25 |
| Maryland Commercial Electronic Mail Act(MD Commercial Email Act) | Maryland | Md. Code, Com. Law §§ 14-3001 to 14-3003 | In force | Marketing | Verified 2026-09-25 |
| Maryland Confidential Financial Records law(MD Financial Records Confidentiality) | Maryland | Md. Code, Fin. Inst. §§ 1-301 to 1-307 | In force | Financial | Verified 2026-09-25 |
| Maryland Confidentiality of Medical Records Act(MCMRA) | Maryland | Md. Code, Health-Gen. §§ 4-301 to 4-310 | In force | Health | Verified 2026-09-25 |
| Maryland Consumer Credit Reporting Agencies Act(MD CCRA) | Maryland | Md. Code, Com. Law §§ 14-1201 to 14-1225 | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Maryland employer access to personal accounts (User Name and Password Privacy Protection)(MD Social Media Password Law) | Maryland | Md. Code, Lab. & Empl. § 3-712 | In force | Employees | Verified 2026-09-25 |
| Maryland Genetic Information Privacy law (direct-to-consumer genetic testing)(MD Genetic Information Privacy) | Maryland | Md. Code, Com. Law §§ 14-4401 to 14-4408 | In force | Genetic | Verified 2026-09-25 |
| Maryland Insurance Data Security law (Insurance Article Title 33)(MD Insurance Data Security) | Maryland | Md. Code, Ins. §§ 33-101 to 33-109 | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Maryland lie detector test prohibition(MD Polygraph Law) | Maryland | Md. Code, Lab. & Empl. § 3-702 | In force | Employees | Verified 2026-09-25 |
| Maryland Online Data Privacy Act of 2024(MODPA) | Maryland | Md. Code, Com. Law §§ 14-4701 to 14-4714 (enacted by 2024 Md. Laws chs. 454 and 455 as §§ 14-4601 to 14-4613, since renumbered) | In force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Maryland Pen Register and Trap and Trace Devices law(MD Pen Register Act) | Maryland | Md. Code, Cts. & Jud. Proc. § 10-4B-01 et seq. | In force | Communications | Verified 2026-09-25 |
| Maryland Personal Information Protection Act(MPIPA) | Maryland | Md. Code, Com. Law §§ 14-3501 to 14-3508 | In force | Breach notification, Data security, Health, Genetic, Biometric | Verified 2026-09-25 |
| Maryland Stored Wire and Electronic Communications and Transactional Records Access(MD Stored Communications Act) | Maryland | Md. Code, Cts. & Jud. Proc. §§ 10-4A-01 to 10-4A-08 | In force | Communications | Verified 2026-09-25 |
| Maryland Student Data Privacy Act (operators of PreK-12 online services)(MD Student Data Privacy Act) | Maryland | Md. Code, Educ. § 4-131 | In force | Students, Children | Verified 2026-09-25 |
| Maryland Telephone Consumer Protection Act(MD TCPA) | Maryland | Md. Code, Com. Law §§ 14-3201 to 14-3202 | In force | Marketing, Communications | Verified 2026-09-25 |
| Maryland Telephone Solicitations Act(MD Telephone Solicitations Act) | Maryland | Md. Code, Com. Law §§ 14-2201 to 14-2205 | In force | Marketing | Verified 2026-09-25 |
| Maryland visual surveillance and hidden camera crimes(MD Visual Surveillance Law) | Maryland | Md. Code, Crim. Law §§ 3-901 to 3-903 | In force | Other | Verified 2026-09-25 |
| Maryland Wiretap and Electronic Surveillance Act(MD Wiretap Act) | Maryland | Md. Code, Cts. & Jud. Proc. §§ 10-401 to 10-414 | In force | Communications | Verified 2026-09-25 |
| Medical record retention and destruction(MD Medical Records Retention Law) | Maryland | Md. Code, Health-Gen. § 4-403 | In force | Health, Data security | Verified 2026-09-25 |
| Motor Vehicle Administration records: personal information disclosure and recipient limits(MD MVA Records Privacy) | Maryland | Md. Code, Gen. Prov. § 4-320; Transp. § 12-112 | In force | Government records, Marketing | Verified 2026-09-25 |
| Nonconsensual distribution of intimate images (revenge porn), including computer-generated images(MD Revenge Porn Law) | Maryland | Md. Code, Crim. Law § 3-809 | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Payment card receipt truncation(MD Card Receipt Truncation) | Maryland | Md. Code, Com. Law § 14-1318 | In force | Data security, Financial | Verified 2026-09-25 |
| Protection From Predatory Pricing Act (dynamic pricing and personal data in food retail and delivery)(MD Protection From Predatory Pricing Act) | Maryland | Md. Code, Com. Law §§ 13-321 to 13-322 (added by 2026 Md. Laws ch. 154) | Enacted, not yet in force | Other, Artificial intelligence | Verified 2026-09-25 |
| Social Security Number Privacy Act(MD SSN Privacy Act) | Maryland | Md. Code, Com. Law §§ 14-3401 to 14-3402 | In force | Data security | Verified 2026-09-25 |
| Stop the Spam Calls Act of 2023(MD Stop the Spam Calls Act) | Maryland | Md. Code, Com. Law §§ 14-4501 to 14-4504 | In force | Marketing, Communications | Verified 2026-09-25 |
| Automatic Dialing-Announcing Devices and Telephone Solicitation Hours(MN ADAD Law) | Minnesota | Minn. Stat. 325E.26 to 325E.31 | In force | Marketing, Communications | Verified 2026-09-25 |
| Drug and Alcohol Testing in the Workplace Act (privacy safeguards)(MN DATWA) | Minnesota | Minn. Stat. 181.950 to 181.957 | In force | Employees, Health | Verified 2026-09-25 |
| Employee Access to Personnel Records(MN Personnel Records Act) | Minnesota | Minn. Stat. 181.960 to 181.966 | In force | Employees | Verified 2026-09-25 |
| False or Misleading Commercial Electronic Mail Messages(MN Commercial Email Law) | Minnesota | Minn. Stat. 325F.694 | In force | Marketing | Verified 2026-09-25 |
| Genetic Discrimination Act (insurance)(MN Genetic Discrimination Act) | Minnesota | Minn. Stat. 72A.139 | In force | Genetic, Health | Verified 2026-09-25 |
| Genetic Information Consent Requirement(MN Genetic Information (13.386)) | Minnesota | Minn. Stat. 13.386 | In force | Genetic, Government records, Health | Verified 2026-09-25 |
| Genetic Testing in Employment(MN Employment Genetic Testing) | Minnesota | Minn. Stat. 181.974 | In force | Genetic, Employees | Verified 2026-09-25 |
| Interference with Privacy (surreptitious observation and recording)(MN Interference with Privacy) | Minnesota | Minn. Stat. 609.746, subd. 1 | In force | Other, Communications | Verified 2026-09-25 |
| Minnesota Consumer Data Privacy Act(MCDPA) | Minnesota | Minn. Stat. 325M.10 to 325M.21 | In force | Comprehensive privacy, Children, Biometric, Genetic, Location, Data security, Artificial intelligence | Verified 2026-09-25 |
| Minnesota Consumer Reports and Security Freeze Law(MN Consumer Reports and Security Freeze) | Minnesota | Minn. Stat. ch. 13C (13C.001 to 13C.10) | In force | Credit reporting, Financial, Employees, Children | Verified 2026-09-25 |
| Minnesota Data Breach Notification Law(MN Breach Notification) | Minnesota | Minn. Stat. 325E.61 | In force | Breach notification | Verified 2026-09-25 |
| Minnesota Genetic Information Privacy Act (direct-to-consumer genetic testing)(MN Genetic Information Privacy Act) | Minnesota | Minn. Stat. 325F.995 | In force | Genetic, Health | Verified 2026-09-25 |
| Minnesota Government Data Practices Act: private contractors and government breach notice(MN MGDPA (contractor provisions)) | Minnesota | Minn. Stat. 13.05, subd. 11; 13.055; 13.08 | In force | Government records, Breach notification, Data security | Verified 2026-09-25 |
| Minnesota Health Records Act(MN Health Records Act) | Minnesota | Minn. Stat. 144.291 to 144.298 (including 144.2925) | In force | Health | Verified 2026-09-25 |
| Minnesota Insurance Fair Information Reporting Act(MN Insurance Fair Information Reporting Act) | Minnesota | Minn. Stat. 72A.49 to 72A.505 | In force | Financial, Health | Verified 2026-09-25 |
| Minnesota Internet Service Provider Privacy Law(MN ISP Privacy) | Minnesota | Minn. Stat. 325M.01 to 325M.09 | In force | Communications, Data security | Verified 2026-09-25 |
| Minnesota Plastic Card Security Act (access device data retention)(MN Plastic Card Security Act) | Minnesota | Minn. Stat. 325E.64 | In force | Data security, Financial, Breach notification | Verified 2026-09-25 |
| Minnesota Privacy of Communications Act (wiretap and recording consent)(MN Wiretap Act) | Minnesota | Minn. Stat. 626A.01 to 626A.23 (key sections 626A.02, 626A.13) | In force | Communications | Verified 2026-09-25 |
| Minnesota Social Security Number Protection Law(MN SSN Protection) | Minnesota | Minn. Stat. 325E.59 | In force | Data security | Verified 2026-09-25 |
| Minnesota Stored Communications Provisions(MN Stored Communications) | Minnesota | Minn. Stat. 626A.26 to 626A.34 (key sections 626A.26, 626A.27) | In force | Communications | Verified 2026-09-25 |
| Nonconsensual Dissemination of Private Sexual Images (civil and criminal)(MN NCII Law) | Minnesota | Minn. Stat. 604.31 (civil); 617.261 (criminal) | In force | Other | Verified 2026-09-25 |
| Nonconsensual Dissemination of Sexual Deep Fakes (civil and criminal)(MN Intimate Deepfake Law) | Minnesota | Minn. Stat. 604.32 (civil); 617.262 (criminal) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Pen Register, Trap and Trace, and Mobile Tracking Device Restrictions(MN Tracking Device Law) | Minnesota | Minn. Stat. 626A.35 to 626A.391 | In force | Location, Communications | Verified 2026-09-25 |
| Prohibiting Social Media Manipulation Act(MN Social Media Manipulation Act) | Minnesota | Minn. Stat. 325M.30 to 325M.34 (enacted as Laws 2024, ch. 114, art. 3, ss. 63-67, originally coded as ch. 325O) | In force | Children, Artificial intelligence, Other | Verified 2026-09-25 |
| Prohibition on Nudification Technology(MN Nudification Ban) | Minnesota | Minn. Stat. 325E.91 (Laws 2026, ch. 72, s. 1) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Social Media Mental Health Warning Label Law(MN Social Media Warning Label) | Minnesota | Minn. Stat. 325M.335 (Laws 2025, 1st Spec. Sess., ch. 3, art. 19, s. 13; enforcement in 325M.34) | In force | Children, Other | Verified 2026-09-25 |
| Stop Harms from Addictive Social Media(MN Addictive Social Media (Minors)) | Minnesota | Minn. Stat. 325M.40 (Laws 2026, ch. 111, s. 2) | Enacted, not yet in force | Children, Marketing, Biometric, Location | Verified 2026-09-25 |
| Student Data Privacy: Technology Providers and School-Issued Devices (Educational Data)(MN Student Data Privacy) | Minnesota | Minn. Stat. 13.32, subds. 1(d), (g), 13-15 (within 13.32, Educational Data) | In force | Students, Children, Location, Government records | Verified 2026-09-25 |
| Unsolicited Facsimile Advertising(MN Junk Fax Law) | Minnesota | Minn. Stat. 325E.395 | In force | Marketing, Communications | Verified 2026-09-25 |
| Use of Deep Fake Technology to Influence an Election(MN Election Deepfake Law) | Minnesota | Minn. Stat. 609.771 | In force | Artificial intelligence | Verified 2026-09-25 |
| Videotape Rental and Sales Records Privacy(MN Video Privacy Law) | Minnesota | Minn. Stat. 325I.01 to 325I.03 | In force | Other, Marketing | Verified 2026-09-25 |
| Age Verification for Material Harmful to Minors(MT Age Verification Act) | Montana | Mont. Code Ann. 30-14-159 | In force | Children | Verified 2026-09-25 |
| AIDS Prevention Act: Confidentiality of HIV Test Records(MT HIV Confidentiality) | Montana | Mont. Code Ann. 50-16-1009, 50-16-1013 | In force | Health | Verified 2026-09-25 |
| An Act Banning TikTok in Montana (SB 419, 2023)(MT TikTok Ban (SB 419)) | Montana | SB 419, 68th Leg. (Mont. 2023), secs. 1-5 (directed to be codified in Title 30, ch. 14, parts 1-2) | Expired | Other | Verified 2026-09-25 |
| Child Digital Protection Act(MT Child Digital Protection Act) | Montana | Mont. Code Ann. 30-25-301 to 30-25-307 | In force | Children | Verified 2026-09-25 |
| Computer Security Breach Notification(MT Breach Notification) | Montana | Mont. Code Ann. 30-14-1704 (with 30-14-1701, 30-14-1702, 30-14-1705) | In force | Breach notification | Verified 2026-09-25 |
| Credit Report Security Freeze(MT Security Freeze) | Montana | Mont. Code Ann. 30-14-1726 to 30-14-1736 | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Credit Report Submission Prohibitions (ambulance balance billing)(MT Ambulance Credit Reporting Limit) | Montana | Mont. Code Ann. 30-14-2601 to 30-14-2602 | In force | Credit reporting, Health | Verified 2026-09-25 |
| Criminal Invasion of Personal Privacy (pretexting)(MT Criminal Invasion of Privacy) | Montana | Mont. Code Ann. 45-8-220 | In force | Other, Financial | Verified 2026-09-25 |
| Deepfake Regulation in Election Communications (SB 25)(MT Election Deepfake Law) | Montana | Mont. Code Ann. 13-35-801 to 13-35-804 | In force | Artificial intelligence | Verified 2026-09-25 |
| Discrimination Based on Vaccination Status or Immunity Passport Prohibited(MT Vaccination Status Law) | Montana | Mont. Code Ann. 49-2-312 | In force | Health, Employees | Verified 2026-09-25 |
| Employer Access to Personal Social Media Accounts(MT Social Media Privacy (Employment)) | Montana | Mont. Code Ann. 39-2-307 | In force | Employees | Verified 2026-09-25 |
| Fraudulent Electronic Misrepresentation (anti-phishing)(MT Anti-Phishing) | Montana | Mont. Code Ann. 30-14-1712 to 30-14-1713 | In force | Other, Data security | Verified 2026-09-25 |
| Genetic Information Privacy Act (including 2025 neurotechnology data amendments)(MT GIPA) | Montana | Mont. Code Ann. 30-23-101 to 30-23-106 | In force | Genetic, Health, Biometric | Verified 2026-09-25 |
| Health Care Information Privacy Requirements for Providers Subject to HIPAA (including 2026 electronic health record result release)(MT HIPAA Provider Privacy Law) | Montana | Mont. Code Ann. 50-16-801 to 50-16-818 | In force | Health | Verified 2026-09-25 |
| Identity Theft Impediments: Credit Card Address Changes(MT Credit Card ID Theft Impediments) | Montana | Mont. Code Ann. 30-14-1721 to 30-14-1722 | In force | Financial | Verified 2026-09-25 |
| Insurance Information and Privacy Protection Act(MT Insurance Privacy Act) | Montana | Mont. Code Ann. Title 33, ch. 19 (33-19-101 to 33-19-409) | In force | Financial, Health, Breach notification, Data security | Verified 2026-09-25 |
| Lie Detector Tests Prohibited(MT Polygraph Ban) | Montana | Mont. Code Ann. 39-2-304 | In force | Employees | Verified 2026-09-25 |
| Montana Consumer Data Privacy Act(MTCDPA) | Montana | Mont. Code Ann. 30-14-2801 to 30-14-2820 | In force | Comprehensive privacy, Children | Verified 2026-09-25 |
| Montana Pupil Online Personal Information Protection Act(MT Pupil Online Privacy Act) | Montana | Mont. Code Ann. 20-7-1323 to 20-7-1326 | In force | Students, Children | Verified 2026-09-25 |
| Montana Telemarketing Registration and Fraud Prevention Act(MT Telemarketing Act) | Montana | Mont. Code Ann. 30-14-1401 to 30-14-1414 | In force | Marketing | Verified 2026-09-25 |
| Privacy in Communications (recording consent and interception)(MT Privacy in Communications) | Montana | Mont. Code Ann. 45-8-213 | In force | Communications | Verified 2026-09-25 |
| Property Right in Name, Voice, and Visual Likeness (digital replicas)(MT Likeness Rights (HB 513)) | Montana | Mont. Code Ann. 30-14-1714 | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Record Destruction (Personal Information Disposal)(MT Record Destruction) | Montana | Mont. Code Ann. 30-14-1703 | In force | Data security | Verified 2026-09-25 |
| Restrictions on Use of Genetic Information in Insurance(MT Genetic Insurance Law) | Montana | Mont. Code Ann. 33-18-901 to 33-18-904 | In force | Genetic, Health, Financial | Verified 2026-09-25 |
| State Agency Protection of Personal Information and Breach Notification(MT State Agency Breach Law) | Montana | Mont. Code Ann. 2-6-1501 to 2-6-1504 | In force | Government records, Breach notification, Data security | Verified 2026-09-25 |
| Telephone Solicitation No-Call List(MT No-Call Law) | Montana | Mont. Code Ann. 30-14-1601 to 30-14-1606 | In force | Marketing | Verified 2026-09-25 |
| Uniform Health Care Information Act (providers not subject to HIPAA)(MT UHCIA) | Montana | Mont. Code Ann. 50-16-501 to 50-16-553 | In force | Health | Verified 2026-09-25 |
| Unlawful Automated Telephone Solicitation(MT Robocall Law) | Montana | Mont. Code Ann. 45-8-216 | In force | Marketing, Communications | Verified 2026-09-25 |
| Unsolicited Advertisement Facsimile Transmissions(MT Junk Fax Law) | Montana | Mont. Code Ann. 30-14-1501 | In force | Marketing | Verified 2026-09-25 |
| Use of Lawful Products During Nonworking Hours(MT Lawful Product Law) | Montana | Mont. Code Ann. 39-2-313 | In force | Employees | Verified 2026-09-25 |
| Workforce Drug and Alcohol Testing Act(MT Drug Testing Act) | Montana | Mont. Code Ann. 39-2-205 to 39-2-211 | In force | Employees, Health | Verified 2026-09-25 |
| Age-Appropriate Online Design Code Act(Nebraska AADC) | Nebraska | Neb. Rev. Stat. 87-1301 to 87-1311 | In force | Children, Location, Marketing | Verified 2026-09-25 |
| Agricultural Data Privacy Act(Nebraska Agricultural Data Privacy Act) | Nebraska | Neb. Rev. Stat. 87-1401 to 87-1410 | In force | Data security, Location, Other | Verified 2026-09-25 |
| Automatic Dialing-Announcing Devices Act(Nebraska ADAD Act) | Nebraska | Neb. Rev. Stat. 86-236 to 86-257 | In force | Marketing, Communications | Verified 2026-09-25 |
| Automatic License Plate Reader Privacy Act(Nebraska ALPR Privacy Act) | Nebraska | Neb. Rev. Stat. 60-3201 to 60-3209 | In force | Government records, Location | Verified 2026-09-25 |
| Conversational Artificial Intelligence Safety Act(Nebraska CAISA) | Nebraska | Neb. Rev. Stat. 86-1801 to 86-1807 | Enacted, not yet in force | Artificial intelligence, Children | Verified 2026-09-25 |
| Credit Report Protection Act(Nebraska Credit Report Protection Act) | Nebraska | Neb. Rev. Stat. 8-2601 to 8-2615 | In force | Credit reporting, Financial, Children | Verified 2026-09-25 |
| Criminal Impersonation, Identity Theft, and Identity Fraud(Nebraska Identity Theft Law) | Nebraska | Neb. Rev. Stat. 28-636 to 28-640 | In force | Other, Financial | Verified 2026-09-25 |
| Cybersecurity Event Class Action Liability Limit(Nebraska Cybersecurity Event Liability Law) | Nebraska | Neb. Rev. Stat. 87-1201 | In force | Data security, Breach notification | Verified 2026-09-25 |
| Disclosure of Confidential Financial Records(Nebraska Financial Records Disclosure Law) | Nebraska | Neb. Rev. Stat. 8-1401 to 8-1402 | In force | Financial, Government records | Verified 2026-09-25 |
| Employer Genetic Testing Restrictions(Nebraska Employment Genetic Testing Law) | Nebraska | Neb. Rev. Stat. 48-236 | In force | Genetic, Employees | Verified 2026-09-25 |
| Employer Use of Social Security Numbers(Nebraska Employee SSN Protection Law) | Nebraska | Neb. Rev. Stat. 48-237 | In force | Employees, Data security | Verified 2026-09-25 |
| Financial Data Protection and Consumer Notification of Data Security Breach Act of 2006(Nebraska Data Breach Notification and Data Security Act) | Nebraska | Neb. Rev. Stat. 87-801 to 87-808 | In force | Breach notification, Data security, Biometric | Verified 2026-09-25 |
| Genetic Information Privacy Act(Nebraska GIPA) | Nebraska | Neb. Rev. Stat. 87-901 to 87-904 | In force | Genetic | Verified 2026-09-25 |
| Genetic Sequencing Foreign Adversary Restrictions(Nebraska Genetic Sequencing Security Law) | Nebraska | Neb. Rev. Stat. 71-6801 to 71-6804 | In force | Genetic, Data security, Health | Verified 2026-09-25 |
| Health Insurance Genetic Testing Prohibition(Nebraska Insurance Genetic Testing Law) | Nebraska | Neb. Rev. Stat. 44-7,100 | In force | Genetic, Health | Verified 2026-09-25 |
| Kelsey Smith Act(Nebraska Kelsey Smith Act) | Nebraska | Neb. Rev. Stat. 86-801 to 86-807 | In force | Location, Communications | Verified 2026-09-25 |
| Nebraska Data Privacy Act(NDPA) | Nebraska | Neb. Rev. Stat. 87-1101 to 87-1130 | In force | Comprehensive privacy, Children, Biometric, Genetic, Location, Data security | Verified 2026-09-25 |
| Nebraska Interception of Wire, Electronic, and Oral Communications and Stored Communications Law(Nebraska Wiretap and Stored Communications Law) | Nebraska | Neb. Rev. Stat. 86-271 to 86-2,115 | In force | Communications, Employees, Location | Verified 2026-09-25 |
| Nebraska Statutory Right of Privacy(Nebraska Privacy Tort Statute) | Nebraska | Neb. Rev. Stat. 20-201 to 20-211; 25-840.01 | In force | Other, Marketing | Verified 2026-09-25 |
| Online Age Verification Liability Act(Nebraska Online Age Verification Liability Act) | Nebraska | Neb. Rev. Stat. 87-1001 to 87-1005 | In force | Children, Other | Verified 2026-09-25 |
| Parental Rights in Social Media Act(Nebraska PRSMA) | Nebraska | Neb. Rev. Stat. 86-1701 to 86-1705 | Blocked by a court | Children, Communications | Verified 2026-09-25 |
| Patient Access to Medical Records(Nebraska Medical Records Access Law) | Nebraska | Neb. Rev. Stat. 71-8401 to 71-8407 | In force | Health | Verified 2026-09-25 |
| Predictive Genetic Testing Informed Consent(Nebraska Genetic Testing Informed Consent Law) | Nebraska | Neb. Rev. Stat. 71-551 | In force | Genetic, Health | Verified 2026-09-25 |
| Privacy of Insurance Consumer Information Act(Nebraska Insurance Privacy Act) | Nebraska | Neb. Rev. Stat. 44-901 to 44-925 | In force | Financial, Health | Verified 2026-09-25 |
| Public School Student Records Access and Confidentiality(Nebraska Student Records Law) | Nebraska | Neb. Rev. Stat. 79-2,104; 79-539 | In force | Students, Government records | Verified 2026-09-25 |
| Student Online Personal Protection Act(Nebraska SOPPA) | Nebraska | Neb. Rev. Stat. 79-2,153 to 79-2,155 | In force | Students, Children, Data security, Marketing | Verified 2026-09-25 |
| Telemarketing and Prize Promotions Act(Nebraska Telemarketing and Prize Promotions Act) | Nebraska | Neb. Rev. Stat. 86-212 to 86-235 | In force | Marketing | Verified 2026-09-25 |
| Uniform Civil Remedies for Unauthorized Disclosure of Intimate Images Act(Nebraska Intimate Images Civil Remedies Act) | Nebraska | Neb. Rev. Stat. 25-3501 to 25-3509 | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Uniform Deceptive Trade Practices Act: Privacy Policy and Related Online Provisions(Nebraska UDTPA Privacy Provisions) | Nebraska | Neb. Rev. Stat. 87-302(a)(15), (a)(23), (a)(26); 87-303; 87-303.11 | In force | Other, Marketing, Children | Verified 2026-09-25 |
| Uniform Motor Vehicle Records Disclosure Act(Nebraska UMVRDA) | Nebraska | Neb. Rev. Stat. 60-2901 to 60-2912 | In force | Government records, Marketing | Verified 2026-09-25 |
| Unlawful Intrusion and Nonconsensual Intimate Image Crimes(Nebraska Unlawful Intrusion Law) | Nebraska | Neb. Rev. Stat. 28-311.08 | In force | Other | Verified 2026-09-25 |
| Unlawful Use of Mobile Tracking Devices(Nebraska Mobile Tracking Device Law) | Nebraska | Neb. Rev. Stat. 28-1336 to 28-1339 | In force | Location | Verified 2026-09-25 |
| Workplace Drug and Alcohol Testing(Nebraska Workplace Drug Testing Law) | Nebraska | Neb. Rev. Stat. 48-1901 to 48-1910 | In force | Employees, Health | Verified 2026-09-25 |
| Workplace Privacy Act(Nebraska Workplace Privacy Act) | Nebraska | Neb. Rev. Stat. 48-3501 to 48-3511 | In force | Employees | Verified 2026-09-25 |
| AI Chatbot Solicitation of Children (HB 143, 2025)(NH AI Chatbot Child Safety Law) | New Hampshire | N.H. Rev. Stat. Ann. 507:8-k; 639:3, III-a (2025 N.H. Laws ch. 270) | In force | Artificial intelligence, Children | Verified 2026-09-25 |
| Computer Spyware(NH Spyware Law) | New Hampshire | N.H. Rev. Stat. Ann. ch. 359-H | In force | Other, Communications | Verified 2026-09-25 |
| Educational Institution Policies on Social Media(NH Student Social Media Privacy) | New Hampshire | N.H. Rev. Stat. Ann. 189:70 | In force | Students, Other | Verified 2026-09-25 |
| Employee Access to Personnel Files(NH Personnel File Access Law) | New Hampshire | N.H. Rev. Stat. Ann. 275:56 | In force | Employees, Health | Verified 2026-09-25 |
| Event Data Recording Devices in Motor Vehicles(NH Event Data Recorder Law) | New Hampshire | N.H. Rev. Stat. Ann. 357-G:1 | In force | Location, Other | Verified 2026-09-25 |
| Fraudulent Use of Deepfakes (criminal offense and civil action)(NH Deepfake Law) | New Hampshire | N.H. Rev. Stat. Ann. 638:26-a; 507:8-j (2024 N.H. Laws ch. 243) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Genetic Testing(NH Genetic Testing Law) | New Hampshire | N.H. Rev. Stat. Ann. ch. 141-H | In force | Genetic, Health, Employees | Verified 2026-09-25 |
| Human Immunodeficiency Virus Education, Prevention, and Control (HIV testing confidentiality)(NH HIV Confidentiality Law) | New Hampshire | N.H. Rev. Stat. Ann. 141-F:5 to 141-F:11 | In force | Health | Verified 2026-09-25 |
| Identity Theft (civil remedies)(NH Identity Theft Act) | New Hampshire | N.H. Rev. Stat. Ann. ch. 359-I | In force | Financial, Other | Verified 2026-09-25 |
| Insurance Data Security Law(NH Insurance Data Security Law) | New Hampshire | N.H. Rev. Stat. Ann. ch. 420-P | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Library User Records Confidentiality(NH Library Records Law) | New Hampshire | N.H. Rev. Stat. Ann. 201-D:11 | In force | Government records, Children, Other | Verified 2026-09-25 |
| Medical Records, Patient Information, and the Health Information Organization Corporation(NH Medical Records Privacy Law) | New Hampshire | N.H. Rev. Stat. Ann. ch. 332-I | In force | Health, Marketing | Verified 2026-09-25 |
| Motor Vehicle Records Confidentiality (state driver privacy law)(NH Motor Vehicle Records Privacy) | New Hampshire | N.H. Rev. Stat. Ann. 260:14 | In force | Government records, Data brokers, Other | Verified 2026-09-25 |
| New Hampshire Fair Credit Reporting Act (including Security Freeze)(NH FCRA) | New Hampshire | N.H. Rev. Stat. Ann. ch. 359-B | In force | Credit reporting, Financial | Verified 2026-09-25 |
| New Hampshire Privacy Act (Expectation of Privacy)(NHPA) | New Hampshire | N.H. Rev. Stat. Ann. ch. 507-H | In force | Comprehensive privacy, Children, Biometric, Genetic, Health, Location | Verified 2026-09-25 |
| New Hampshire Right to Privacy Act (financial and credit records)(NH Right to Privacy Act) | New Hampshire | N.H. Rev. Stat. Ann. 359-C:1 to 359-C:18 | In force | Financial, Government records | Verified 2026-09-25 |
| Non-academic Student Surveys (parental consent policy)(NH Student Survey Consent Law) | New Hampshire | N.H. Rev. Stat. Ann. 186:11, IX-d | In force | Students, Children, Government records | Verified 2026-09-25 |
| Nonconsensual Dissemination of Private Sexual Images(NH Intimate Image Law) | New Hampshire | N.H. Rev. Stat. Ann. 644:9-a | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Notice of Security Breach(NH Breach Notification Law) | New Hampshire | N.H. Rev. Stat. Ann. 359-C:19 to 359-C:21 | In force | Breach notification | Verified 2026-09-25 |
| Parental Bill of Rights (school records, data collection and recording provisions)(NH Parental Bill of Rights) | New Hampshire | N.H. Rev. Stat. Ann. ch. 189-B (2025 N.H. Laws ch. 74) | In force | Students, Children, Government records | Verified 2026-09-25 |
| Patients' Bill of Rights (licensed health facilities, confidentiality of records)(NH Patients' Bill of Rights) | New Hampshire | N.H. Rev. Stat. Ann. 151:21 | In force | Health | Verified 2026-09-25 |
| Prescription Information to be Kept Confidential(NH Prescription Confidentiality Act) | New Hampshire | N.H. Rev. Stat. Ann. 318:47-f | In force | Health, Data brokers, Marketing | Verified 2026-09-25 |
| Privacy of Consumer Financial and Health Information (Insurance Department rules)(NH Ins 3000) | New Hampshire | N.H. Code Admin. R. Ins 3001-3007 | In force | Financial, Health | Verified 2026-09-25 |
| Property Owner's Consent Required for Smart Meter Gateway Devices(NH Smart Meter Gateway Consent Law) | New Hampshire | N.H. Rev. Stat. Ann. 374:62 | In force | Other | Verified 2026-09-25 |
| Regulation of Biometric Information (government agencies)(NH Government Biometric Law) | New Hampshire | N.H. Rev. Stat. Ann. ch. 359-N | In force | Biometric, Government records | Verified 2026-09-25 |
| Student and Teacher Information Protection and Privacy(NH Student and Teacher Privacy Act) | New Hampshire | N.H. Rev. Stat. Ann. 189:65 to 189:68 | In force | Students, Government records, Biometric, Employees | Verified 2026-09-25 |
| Student Online Personal Information(NH SOPIPA) | New Hampshire | N.H. Rev. Stat. Ann. 189:68-a | In force | Students, Children, Data security | Verified 2026-09-25 |
| Synthetic Media and Deceptive and Fraudulent Deepfakes in Elections(NH Election Deepfake Disclosure Law) | New Hampshire | N.H. Rev. Stat. Ann. 664:14-c (2024 N.H. Laws ch. 345) | In force | Artificial intelligence, Marketing | Verified 2026-09-25 |
| Telemarketing (autodialers, caller ID and do-not-call)(NH Telemarketing Law) | New Hampshire | N.H. Rev. Stat. Ann. ch. 359-E | In force | Marketing, Communications | Verified 2026-09-25 |
| Use of Social Media and Electronic Mail (employee and applicant account privacy)(NH Employee Social Media Privacy Law) | New Hampshire | N.H. Rev. Stat. Ann. 275:73 to 275:75 | In force | Employees | Verified 2026-09-25 |
| Videotape Rental and Sales Records(NH Video Records Privacy Law) | New Hampshire | N.H. Rev. Stat. Ann. 351-A:1 | In force | Other, Marketing | Verified 2026-09-25 |
| Violation of Privacy (surveillance and voyeurism offenses)(NH Violation of Privacy Statute) | New Hampshire | N.H. Rev. Stat. Ann. 644:9 | In force | Communications, Location, Other | Verified 2026-09-25 |
| Wiretapping and Eavesdropping(NH Wiretap Act) | New Hampshire | N.H. Rev. Stat. Ann. ch. 570-A | In force | Communications, Location | Verified 2026-09-25 |
| AIDS/HIV Records Confidentiality(NJ HIV Confidentiality Law) | New Jersey | N.J.S.A. 26:5C-5 to 26:5C-14; P.L.1989, c.303, as amended (including P.L.2013, c.103) | In force | Health | Verified 2026-09-25 |
| Daniel's Law (nondisclosure of covered persons' home addresses and unpublished telephone numbers)(Daniel's Law) | New Jersey | N.J.S.A. 56:8-166.1 (civil), 56:8-166.3; N.J.S.A. 2C:20-31.1 (criminal); related public-records provisions at N.J.S.A. 47:1B-1 et seq.; P.L.2020, c.125, amended by P.L.2021, c.24, P.L.2021, c.371 and P.L.2023, c.113 | In force | Other, Data brokers, Government records | Verified 2026-09-25 |
| Data Broker and Data Collector Registration and Sensitive Data Sale Ban (P.L.2026, c.25)(NJ Data Broker Law) | New Jersey | N.J.S.A. 56:8-166.20 to 56:8-166.24; P.L.2026, c.25 (A5328 1R), ss. 2-8 | In force | Data brokers, Health, Genetic, Biometric, Location, Children | Verified 2026-09-25 |
| Deceptive Audio or Visual Media (Deepfake) Law(NJ Deepfake Law) | New Jersey | N.J.S.A. 2C:21-17.7 to 2C:21-17.8; P.L.2025, c.40 (A3540) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Employer Access to Personal Social Media Accounts Prohibited(NJ Social Media Privacy (Employment) Law) | New Jersey | N.J.S.A. 34:6B-5 to 34:6B-10; P.L.2013, c.155 (A2878) | In force | Employees | Verified 2026-09-25 |
| Employer Vehicle Tracking Device Notice Law(NJ Employee Vehicle Tracking Law) | New Jersey | N.J.S.A. 34:6B-22; P.L.2021, c.449 (A3950) | In force | Employees, Location | Verified 2026-09-25 |
| Fair Price Protection Act (surveillance pricing of groceries)(NJ Fair Price Protection Act) | New Jersey | S3612/S3717 (2R SCS), 222nd Legislature (2026), supplementing the Consumer Fraud Act, N.J.S.A. 56:8-1 et seq. (P.L.2026 chapter number and N.J.S.A. sections not yet posted) | Enacted, not yet in force | Artificial intelligence, Location, Biometric, Other | Verified 2026-09-25 |
| Health Insurance Carrier Encryption of Personal Information(NJ Health Carrier Encryption Law) | New Jersey | N.J.S.A. 56:8-196 to 56:8-198; P.L.2014, c.88 | In force | Health, Data security | Verified 2026-09-25 |
| Identity Theft Prevention Act: Credit Report Security Freeze and Identity Theft Victim Credit Protection(NJ Security Freeze Law) | New Jersey | N.J.S.A. 56:11-44 to 56:11-52; P.L.2005, c.226, ss.1-9; P.L.2007, c.33; amended by P.L.2018, c.153 | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Identity Theft Prevention Act: Data Breach Notification(NJ Breach Notification Law) | New Jersey | N.J.S.A. 56:8-161, 56:8-163, 56:8-166; P.L.2005, c.226, ss.10, 12, 15; amended by P.L.2019, c.95 | In force | Breach notification, Data security | Verified 2026-09-25 |
| Identity Theft Prevention Act: Record Disposal and Social Security Number Protection(NJ SSN and Disposal Law) | New Jersey | N.J.S.A. 56:8-162 (disposal), 56:8-164 (SSN), 56:8-166; P.L.2005, c.226, ss.11, 13, 15 | In force | Data security | Verified 2026-09-25 |
| Internet-Connected Baby Monitor Security Requirements(NJ Baby Monitor Security Law) | New Jersey | N.J.S.A. 56:8-207; P.L.2017, c.81 (A3581) | In force | Data security, Children | Verified 2026-09-25 |
| Invasion of Privacy (non-consensual intimate observation, recording, and disclosure)(NJ Invasion of Privacy Law) | New Jersey | N.J.S.A. 2C:14-9 (criminal); N.J.S.A. 2A:58D-1 (civil); P.L.2003, c.206, amended by P.L.2016, c.2 | In force | Other | Verified 2026-09-25 |
| New Jersey Data Privacy Act(NJDPA) | New Jersey | N.J.S.A. 56:8-166.4 to 56:8-166.19; enacted by P.L.2023, c.266 (S332); amended by P.L.2025, c.367 (A5017, approved Jan. 20, 2026) and P.L.2026, c.25, s.1 (A5328, approved June 30, 2026) | In force | Comprehensive privacy, Children, Health, Biometric, Genetic, Location, Data security | Verified 2026-09-25 |
| New Jersey Fair Credit Reporting Act(NJ FCRA) | New Jersey | N.J.S.A. 56:11-28 to 56:11-41; P.L.1997, c.172 | In force | Credit reporting, Financial, Employees | Verified 2026-09-25 |
| New Jersey Genetic Privacy Act(NJ Genetic Privacy Act) | New Jersey | N.J.S.A. 10:5-43 to 10:5-49; P.L.1996, c.126 | In force | Genetic, Health | Verified 2026-09-25 |
| New Jersey Insurance Information Practices Act(NJ IIPA) | New Jersey | N.J.S.A. 17:23A-1 et seq. (key sections 17:23A-4, 17:23A-8, 17:23A-13); P.L.1985, c.179 | In force | Financial, Health, Genetic | Verified 2026-09-25 |
| New Jersey Kids Code Act (New Jersey Age-Appropriate Design Code)(NJ Kids Code) | New Jersey | A4015 (3R ACS)/S3413, 222nd Legislature (2026), supplementing Title 56 (N.J.S.A. section numbers and P.L.2026 chapter number not yet assigned online) | Enacted, not yet in force | Children, Location, Other | Verified 2026-09-25 |
| New Jersey No Telemarketing Call Law(NJ Do Not Call Law) | New Jersey | N.J.S.A. 56:8-119 to 56:8-135; P.L.2003, c.76, amended by P.L.2003, c.208, P.L.2005, c.289, P.L.2015, c.2 and P.L.2023, c.58 | In force | Marketing, Communications | Verified 2026-09-25 |
| New Jersey Wiretapping and Electronic Surveillance Control Act(NJ Wiretap Act) | New Jersey | N.J.S.A. 2A:156A-1 et seq. (key sections 2A:156A-3, -4, -24, -27, -29); P.L.1968, c.409, as amended (notably P.L.1993, c.29) | In force | Communications, Location | Verified 2026-09-25 |
| Online Education Services and Student Educational Records Act (student data privacy)(NJ Student Online Privacy Law) | New Jersey | N.J.S.A. 56:8-215 to 56:8-221; P.L.2019, c.494 (A4978) | In force | Students, Children | Verified 2026-09-25 |
| Opportunity to Compete Act (criminal history inquiries in hiring)(NJ Opportunity to Compete Act) | New Jersey | N.J.S.A. 34:6B-11 to 34:6B-19; P.L.2014, c.32, amended by P.L.2017, c.243 | In force | Employees | Verified 2026-09-25 |
| Personal Information and Privacy Protection Act (retail ID card scanning)(NJ PIPPA) | New Jersey | N.J.S.A. 56:11-53 to 56:11-55; P.L.2017, c.124 (S1913) | In force | Other, Data security, Marketing | Verified 2026-09-25 |
| Reproductive Health Care Information Shield (patient information disclosure limits)(NJ Reproductive Health Shield Law) | New Jersey | N.J.S.A. 2A:84A-22.18 to 2A:84A-22.19; P.L.2022, c.51; amended by S2260/A2218 (2026) (chapter number not yet posted) | In force | Health, Government records | Verified 2026-09-25 |
| School-Issued Electronic Device Monitoring Notice(NJ School Device Notice Law) | New Jersey | N.J.S.A. 18A:36-39; P.L.2013, c.44 | In force | Students, Government records, Location | Verified 2026-09-25 |
| Unsolicited Facsimile Advertisement Law(NJ Junk Fax Law) | New Jersey | N.J.S.A. 56:8-157 to 56:8-160; P.L.2005, c.114 | In force | Marketing, Communications | Verified 2026-09-25 |
| Age verification and liability for publishing material harmful to minors (2024 SB 1959)(OK Age Verification Law) | Oklahoma | 15 O.S. §§ 791-791.4 (Laws 2024, c. 181, SB 1959) | In force | Children, Other | Verified 2026-09-25 |
| Anti-Caller ID Spoofing Act(OK Caller ID Spoofing Act) | Oklahoma | 15 O.S. §§ 776.20-776.23 | In force | Communications, Marketing | Verified 2026-09-25 |
| Anti-Phishing Act(OK Anti-Phishing Act) | Oklahoma | 15 O.S. §§ 776.8-776.12 | In force | Other, Communications | Verified 2026-09-25 |
| Commercial and fraudulent electronic mail laws(OK Anti-Spam Law) | Oklahoma | 15 O.S. §§ 776.1-776.7 | In force | Marketing, Communications | Verified 2026-09-25 |
| Confidentiality of mental health and substance abuse treatment information(OK Mental Health Confidentiality) | Oklahoma | 43A O.S. § 1-109 | In force | Health | Verified 2026-09-25 |
| Confidentiality of motor vehicle title and registration records(OK Vehicle Records Privacy) | Oklahoma | 47 O.S. § 1109 | In force | Government records, Marketing | Verified 2026-09-25 |
| Confidentiality of reportable disease and public health investigation information(OK Communicable Disease Confidentiality) | Oklahoma | 63 O.S. § 1-502.2 | In force | Health, Government records | Verified 2026-09-25 |
| Credit and debit card receipt truncation(OK Card Receipt Truncation) | Oklahoma | 15 O.S. § 752A | In force | Financial, Data security | Verified 2026-09-25 |
| Employee social media account privacy(OK Social Media Password Law) | Oklahoma | 40 O.S. §§ 173.2-173.3 | In force | Employees | Verified 2026-09-25 |
| Employer restrictions on use of Social Security numbers(OK Employee SSN Protection) | Oklahoma | 40 O.S. § 173.1 | In force | Employees, Data security | Verified 2026-09-25 |
| Financial Privacy Act(OK Financial Privacy Act) | Oklahoma | 6 O.S. §§ 2201-2208 | In force | Financial, Government records | Verified 2026-09-25 |
| Genetic information disclosure protections and Genetic Research Studies Nondisclosure Act(OK Genetic Disclosure Laws) | Oklahoma | 36 O.S. §§ 3614.3-3614.4 | In force | Genetic, Health | Verified 2026-09-25 |
| Genetic Nondiscrimination in Employment Act(OK Genetic Employment Act) | Oklahoma | 36 O.S. § 3614.2 | In force | Genetic, Employees | Verified 2026-09-25 |
| Genetic Nondiscrimination in Insurance Act(OK GNIA) | Oklahoma | 36 O.S. § 3614.1 | In force | Genetic, Health | Verified 2026-09-25 |
| Identity theft(OK Identity Theft Law) | Oklahoma | 21 O.S. §§ 1533.1-1533.3 | In force | Other, Financial | Verified 2026-09-25 |
| Insurance Data Security Act(OK IDSA) | Oklahoma | 36 O.S. §§ 670-679 (Laws 2024, c. 346, SB 543) | In force | Data security, Breach notification, Financial, Health | Verified 2026-09-25 |
| Insurance privacy of nonpublic personal information(OK Insurance GLBA Privacy) | Oklahoma | 36 O.S. § 307.2 | In force | Financial, Health | Verified 2026-09-25 |
| Kelsey Smith Act(Kelsey Smith Act) | Oklahoma | 13 O.S. § 178 | In force | Location, Communications | Verified 2026-09-25 |
| Nonconsensual dissemination of private sexual images (including AI-generated depictions)(OK Intimate Image Law) | Oklahoma | 21 O.S. § 1040.13b | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Oklahoma Consumer Data Privacy Act (data privacy provisions of 2026 SB 546)(OKCDPA) | Oklahoma | 75A O.S. §§ 300-320 (Laws 2026, c. 8, SB 546) | Enacted, not yet in force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Oklahoma Consumer Report Security Freeze Act(OK Security Freeze Act) | Oklahoma | 24 O.S. §§ 149-159 | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Oklahoma Hospital Cybersecurity Protection Act of 2023(OK Hospital Cybersecurity Act) | Oklahoma | 18 O.S. §§ 2068-2072 (Laws 2023, c. 84, HB 2790) | In force | Data security, Health, Breach notification | Verified 2026-09-25 |
| Oklahoma Responsible Technology in Schools Act(OK Responsible Technology in Schools Act) | Oklahoma | 70 O.S. § 11-120 (Laws 2026, c. 401, SB 1734) | In force | Artificial intelligence, Students, Children | Verified 2026-09-25 |
| Parents' Bill of Rights(OK Parents' Bill of Rights) | Oklahoma | 25 O.S. §§ 2001-2005 | In force | Children, Students, Biometric, Genetic, Health | Verified 2026-09-25 |
| Patient access to medical records(OK Medical Records Access) | Oklahoma | 76 O.S. §§ 19-20 | In force | Health | Verified 2026-09-25 |
| Peeping Tom and clandestine video voyeurism law(OK Peeping Tom Law) | Oklahoma | 21 O.S. § 1171 | In force | Other | Verified 2026-09-25 |
| Prohibition on selling higher-education student data to creditors(OK Student Data Sale Ban) | Oklahoma | 70 O.S. § 3245 | In force | Students, Marketing, Financial | Verified 2026-09-25 |
| Prohibition on unauthorized use of newborn DNA(OK Newborn DNA Law) | Oklahoma | 21 O.S. § 1175 | In force | Genetic, Health, Children | Verified 2026-09-25 |
| Right of publicity and statutory right of privacy (use of name or likeness)(OK Right of Publicity) | Oklahoma | 12 O.S. §§ 1448-1449; 21 O.S. §§ 839.1-839.3 | In force | Other, Marketing | Verified 2026-09-25 |
| Security Breach Notification Act(OK Breach Act) | Oklahoma | 24 O.S. §§ 161-166 | In force | Breach notification, Data security, Biometric | Verified 2026-09-25 |
| Security of Communications Act(OK SCA (wiretap)) | Oklahoma | 13 O.S. §§ 176.1-176.14 | In force | Communications | Verified 2026-09-25 |
| Standards for Workplace Drug and Alcohol Testing Act(OK Workplace Drug Testing Act) | Oklahoma | 40 O.S. §§ 551-563 | In force | Employees, Health | Verified 2026-09-25 |
| Student Data Accessibility, Transparency and Accountability Act of 2013(Student DATA Act) | Oklahoma | 70 O.S. § 3-168 | In force | Students, Government records, Data security | Verified 2026-09-25 |
| Telemarketer Restriction Act(OK Do-Not-Call Act) | Oklahoma | 15 O.S. §§ 775B.1-775B.7 | In force | Marketing, Communications | Verified 2026-09-25 |
| Telephone records protection (pretexting) law(OK Telephone Records Act) | Oklahoma | 21 O.S. §§ 1742.1-1742.4 | In force | Communications, Data security | Verified 2026-09-25 |
| Telephone Solicitation Act of 2022(OTSA) | Oklahoma | 15 O.S. §§ 775C.1-775C.6 | In force | Marketing, Communications | Verified 2026-09-25 |
| Unlawful use of drones for surveillance(OK Drone Surveillance Law) | Oklahoma | 21 O.S. § 1743 | In force | Other, Location | Verified 2026-09-25 |
| Artificial intelligence companion safeguards(SB 1546 (2026)) | Oregon | 2026 Or. Laws ch. 85, secs. 1-2 (SB 1546) | Enacted, not yet in force | Artificial intelligence, Children | Verified 2026-09-25 |
| Automatic dialing and announcing devices (robocalls and robotexts); caller ID spoofing(Oregon ADAD Law) | Oregon | ORS 646A.370 to 646A.376 | In force | Marketing, Communications | Verified 2026-09-25 |
| Credit and debit card receipt truncation and card-transaction information limits(ORS 646A.200-646A.214) | Oregon | ORS 646A.202, 646A.204, 646A.210, 646A.214 | In force | Financial, Data security | Verified 2026-09-25 |
| Disclosure of synthetic media in campaign communications(ORS 260.268 (election deepfakes)) | Oregon | ORS 260.268, 260.269 | In force | Artificial intelligence | Verified 2026-09-25 |
| Employee and applicant social media account privacy(ORS 659A.330) | Oregon | ORS 659A.330 | In force | Employees | Verified 2026-09-25 |
| Employer testing restrictions (polygraph, breathalyzer, psychological stress, brain-wave and genetic tests)(ORS 659A.300) | Oregon | ORS 659A.300 | In force | Employees, Genetic | Verified 2026-09-25 |
| Employer use of credit history restricted(ORS 659A.320) | Oregon | ORS 659A.320 | In force | Employees, Credit reporting | Verified 2026-09-25 |
| Employer use of genetic information prohibited(ORS 659A.303) | Oregon | ORS 659A.303 | In force | Employees, Genetic | Verified 2026-09-25 |
| Genetic information in insurance(ORS 746.135) | Oregon | ORS 746.135 | In force | Genetic, Health | Verified 2026-09-25 |
| Hospital and health center protection of immigration status and country-of-birth information(SB 1570 (2026)) | Oregon | 2026 Or. Laws ch. 93, secs. 3-4 (SB 1570), added to ORS 192.553 to 192.581 | In force | Health, Government records | Verified 2026-09-25 |
| Invasion of personal privacy (voyeurism and nonconsensual nude recording): crime and civil action(ORS 163.700-163.701; 30.831) | Oregon | ORS 163.700, 163.701; ORS 30.831 | In force | Other | Verified 2026-09-25 |
| Kristil's Law: communications provider response to domestic violence and stalking search warrants(HB 4045 (2026)) | Oregon | 2026 Or. Laws ch. 34, secs. 1-3 (HB 4045) | In force | Communications, Government records | Verified 2026-09-25 |
| Misrepresentation in privacy policies (unlawful trade practice)(ORS 646.607(12)) | Oregon | ORS 646.607(12) | In force | Other | Verified 2026-09-25 |
| Mug shot website removal requirement(ORS 646A.806) | Oregon | ORS 646A.806; 646.608(1)(www) | In force | Other | Verified 2026-09-25 |
| Obtaining personal information by false representation (anti-phishing)(ORS 646A.808) | Oregon | ORS 646A.808; 646.607(10) | In force | Data security, Communications | Verified 2026-09-25 |
| Oregon Consumer Information Protection Act: breach notification(OCIPA breach notification) | Oregon | ORS 646A.602, 646A.604 (part of ORS 646A.600 to 646A.628) | In force | Breach notification | Verified 2026-09-25 |
| Oregon Consumer Information Protection Act: data security, disposal and SSN protection(OCIPA safeguards and SSN) | Oregon | ORS 646A.620, 646A.622, 646A.624 | In force | Data security | Verified 2026-09-25 |
| Oregon Consumer Information Protection Act: security freeze(OCIPA security freeze) | Oregon | ORS 646A.606 to 646A.618 | In force | Credit reporting, Financial | Verified 2026-09-25 |
| Oregon Consumer Privacy Act(OCPA) | Oregon | ORS 646A.570 to 646A.589 (2023 Or. Laws ch. 369, SB 619) | In force | Comprehensive privacy, Children, Biometric, Genetic, Location, Data security | Verified 2026-09-25 |
| Oregon Data Broker Registry law(Data Broker Registry) | Oregon | ORS 646A.593 (2023 Or. Laws ch. 395, HB 2052) | In force | Data brokers | Verified 2026-09-25 |
| Oregon financial records privacy law(ORS 192.583-192.607) | Oregon | ORS 192.583 to 192.607 | In force | Financial, Government records | Verified 2026-09-25 |
| Oregon Genetic Privacy Act(Oregon Genetic Privacy Act) | Oregon | ORS 192.531 to 192.549 | In force | Genetic, Health | Verified 2026-09-25 |
| Oregon insurance information and privacy protection law(ORS 746.600-746.690) | Oregon | ORS 746.600 to 746.690 | In force | Financial, Health, Credit reporting | Verified 2026-09-25 |
| Oregon interception and recording of communications law(ORS 165.540 (recording consent)) | Oregon | ORS 165.535 to 165.545; civil remedy ORS 133.739 | In force | Communications | Verified 2026-09-25 |
| Oregon motor vehicle records privacy law(ORS 802.175-802.191) | Oregon | ORS 802.175 to 802.191 | In force | Government records, Data brokers | Verified 2026-09-25 |
| Oregon protected health information law(ORS 192.553-192.581 (PHI)) | Oregon | ORS 192.553 to 192.581 | In force | Health | Verified 2026-09-25 |
| Oregon Student Information Protection Act(OSIPA) | Oregon | ORS 336.184; 646.607(11) | In force | Students, Children, Data security | Verified 2026-09-25 |
| Oregon telephone solicitation laws (telephonic seller registration, no-call list, solicitation limits)(Oregon Telephone Solicitation Laws) | Oregon | ORS 646.551 to 646.578 | In force | Marketing, Communications | Verified 2026-09-25 |
| Public body disclosures to data brokers (immigration attestation)(SB 1587 (2026)) | Oregon | 2026 Or. Laws ch. 96, sec. 1 (SB 1587) | In force | Data brokers, Government records | Verified 2026-09-25 |
| Security requirements for Internet-connected devices(ORS 646A.813 (IoT security)) | Oregon | ORS 646A.813; 646.607(13) | In force | Data security | Verified 2026-09-25 |
| Unlawful disclosure of private information (doxxing): civil action and crime(ORS 30.835; 163.720) | Oregon | ORS 30.835; ORS 163.720 (2025 Or. Laws ch. 417, sec. 1) | In force | Other | Verified 2026-09-25 |
| Unlawful dissemination of intimate images, including realistic digitally created depictions(ORS 163.472; 30.833) | Oregon | ORS 163.472; ORS 30.833; ORS 30.834 | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Artificial Intelligence Companion Models(RI AI Companion Act) | Rhode Island | R.I. Gen. Laws §§ 6-64-1 to 6-64-5 (P.L. 2026, ch. 375 and ch. 376) | Enacted, not yet in force | Artificial intelligence, Children, Health | Verified 2026-09-25 |
| Computer Crime (computer trespass, spam header forgery, cyberstalking and online impersonation)(RI Computer Crime Act) | Rhode Island | R.I. Gen. Laws §§ 11-52-1 to 11-52-8 | In force | Communications, Marketing, Biometric, Other | Verified 2026-09-25 |
| Confidentiality of Employee Assistance Programs and Ban on Requesting Applicants' Tax Returns(RI EAP Confidentiality / Applicant Tax Records) | Rhode Island | R.I. Gen. Laws §§ 28-6.8-1 to 28-6.8-2; 28-6.9-1 to 28-6.9-2 | In force | Employees, Health, Financial | Verified 2026-09-25 |
| Confidentiality of Health Care Communications and Information Act(RI CHCCIA) | Rhode Island | R.I. Gen. Laws §§ 5-37.3-1 to 5-37.3-12 | In force | Health, Employees, Financial | Verified 2026-09-25 |
| Confidentiality of Mental Health Services Information and Records(RI Mental Health Records Law) | Rhode Island | R.I. Gen. Laws § 40.1-5-26 | In force | Health | Verified 2026-09-25 |
| Consumer Empowerment and Identity Theft Prevention Act of 2006 (credit security freeze and Social Security number protection)(RI Security Freeze / SSN Act) | Rhode Island | R.I. Gen. Laws §§ 6-48-1 to 6-48-9 | In force | Credit reporting, Financial, Data security | Verified 2026-09-25 |
| Consumer Privacy in Mortgage Applications (mortgage trigger leads)(RI Mortgage Trigger Lead Law) | Rhode Island | R.I. Gen. Laws § 19-9-35 | In force | Credit reporting, Financial, Marketing | Verified 2026-09-25 |
| Criminal History on Applications for Employment (ban-the-box)(RI Ban-the-Box Law) | Rhode Island | R.I. Gen. Laws § 28-6.14-1 | In force | Employees | Verified 2026-09-25 |
| Deceptive and Fraudulent Synthetic Media in Elections(RI Election Deepfake Law) | Rhode Island | R.I. Gen. Laws §§ 17-30-1 to 17-30-4 | In force | Artificial intelligence, Marketing, Other | Verified 2026-09-25 |
| Educational Records Bill of Rights Act(RI Educational Records Bill of Rights) | Rhode Island | R.I. Gen. Laws §§ 16-71-1 to 16-71-6 | In force | Students, Children, Government records | Verified 2026-09-25 |
| Electronic Mail Fraud Regulatory Act (anti-phishing)(RI Anti-Phishing Act) | Rhode Island | R.I. Gen. Laws §§ 6-49-1 to 6-49-6 | In force | Other, Financial, Biometric | Verified 2026-09-25 |
| Electronic Monitoring in Nursing and Assisted Living Facilities(RI Resident Room Camera Law) | Rhode Island | R.I. Gen. Laws §§ 23-17.29-1 to 23-17.29-13 | In force | Health, Communications, Employees | Verified 2026-09-25 |
| Electronic Tracking of Motor Vehicles(RI Vehicle Tracking Law) | Rhode Island | R.I. Gen. Laws § 11-69-1 | In force | Location, Employees | Verified 2026-09-25 |
| Employee Social Media Privacy(RI Employee Social Media Privacy Act) | Rhode Island | R.I. Gen. Laws §§ 28-56-1 to 28-56-6 | In force | Employees | Verified 2026-09-25 |
| Genetic Information Privacy Act (direct-to-consumer genetic testing)(RI GIPA) | Rhode Island | R.I. Gen. Laws §§ 6-63-1 to 6-63-7 (P.L. 2026, ch. 222 and ch. 223) | In force | Genetic, Health, Marketing | Verified 2026-09-25 |
| Genetic Testing and Genetic Information in Health Insurance(RI Health Insurance Genetic Privacy) | Rhode Island | R.I. Gen. Laws §§ 27-18-52, 27-18-52.1, 27-19-44, 27-19-44.1, 27-20-39, 27-20-39.1, 27-41-53, 27-41-53.1 | In force | Genetic, Health, Financial | Verified 2026-09-25 |
| Genetic Testing as a Condition of Employment(RI Employment Genetic Testing Law) | Rhode Island | R.I. Gen. Laws §§ 28-6.7-1 to 28-6.7-5 | In force | Genetic, Employees | Verified 2026-09-25 |
| HIV Testing Confidentiality and Anti-Discrimination(RI HIV Confidentiality Law) | Rhode Island | R.I. Gen. Laws §§ 23-6.3-7 to 23-6.3-11 | In force | Health, Employees | Verified 2026-09-25 |
| Impersonation and Identity Fraud (including digital forgery)(RI Identity Fraud Law) | Rhode Island | R.I. Gen. Laws §§ 11-49.1-1 to 11-49.1-5 | In force | Financial, Artificial intelligence, Biometric, Other | Verified 2026-09-25 |
| Information Security Program and Security Event Notification for Financial Services Licensees(RI Licensee Information Security Law) | Rhode Island | R.I. Gen. Laws §§ 19-14-35, 19-14-36 (P.L. 2025, chs. 424 and 425) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Insurer Information Security Program and Cybersecurity Event Notification(RI Insurance Data Security Law) | Rhode Island | R.I. Gen. Laws §§ 27-1-46, 27-1-47 (domestic insurers); 27-2-29, 27-2-30 (foreign insurers) | In force | Data security, Breach notification, Financial, Health, Biometric | Verified 2026-09-25 |
| Interception of Wire, Electronic and Oral Communications (wiretap and one-party consent recording)(RI Wiretap Law) | Rhode Island | R.I. Gen. Laws §§ 11-35-21 to 11-35-24; 12-5.1-1 to 12-5.1-16 | In force | Communications | Verified 2026-09-25 |
| Lie Detector Tests as Conditions of Employment(RI Polygraph Ban) | Rhode Island | R.I. Gen. Laws §§ 28-6.1-1 to 28-6.1-4 | In force | Employees | Verified 2026-09-25 |
| Medical Debt Reporting(RI Medical Debt Reporting Ban) | Rhode Island | R.I. Gen. Laws §§ 6-60-1 to 6-60-5 | In force | Credit reporting, Health, Financial | Verified 2026-09-25 |
| Oversight of Artificial Intelligence Technology in Mental Health Care Act(RI Mental Health AI Act) | Rhode Island | R.I. Gen. Laws §§ 40.1-5.5-1 to 40.1-5.5-6 (P.L. 2026, ch. 373 and ch. 374) | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Privacy in Private Spaces (employee recording in restrooms and locker rooms)(RI Employee Private Spaces Law) | Rhode Island | R.I. Gen. Laws § 28-6.12-1 | In force | Employees, Communications | Verified 2026-09-25 |
| Privacy of Consumer Financial and Health Information and Standards for Safeguarding Customer Information (insurance regulations)(RI Insurance Privacy Regulations) | Rhode Island | 230-RICR-20-60-7 (formerly Insurance Regulation 99); 230-RICR-20-60-8 | In force | Financial, Health, Data security, Breach notification | Verified 2026-09-25 |
| Revised Uniform Fiduciary Access to Digital Assets Act(RI RUFADAA) | Rhode Island | R.I. Gen. Laws §§ 33-27.1-1 to 33-27.1-19 | In force | Communications, Other | Verified 2026-09-25 |
| Rhode Island Data Transparency and Privacy Protection Act(RIDTPPA) | Rhode Island | R.I. Gen. Laws §§ 6-48.1-1 to 6-48.1-10 | In force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Rhode Island Health Information Exchange Act of 2008(RI HIE Act) | Rhode Island | R.I. Gen. Laws §§ 5-37.7-1 to 5-37.7-15 | In force | Health, Data security | Verified 2026-09-25 |
| Rhode Island Identity Theft Protection Act of 2015 (information security and breach notification)(RI ITPA) | Rhode Island | R.I. Gen. Laws §§ 11-49.3-1 to 11-49.3-7 | In force | Breach notification, Data security, Government records | Verified 2026-09-25 |
| Rhode Island Judicial Security Act (removal of judges' personal information)(RI Judicial Security Act) | Rhode Island | R.I. Gen. Laws § 8-15-12 | In force | Data brokers, Government records, Other | Verified 2026-09-25 |
| Safe Destruction of Documents Containing Personal Information(RI Document Destruction Law) | Rhode Island | R.I. Gen. Laws §§ 6-52-1 to 6-52-4 | In force | Data security, Health, Financial | Verified 2026-09-25 |
| Statutory Right to Privacy (civil action)(RI Privacy Act (tort)) | Rhode Island | R.I. Gen. Laws § 9-1-28.1 | In force | Other, Marketing | Verified 2026-09-25 |
| Student Data-Cloud Computing(RI Student Cloud Data Law) | Rhode Island | R.I. Gen. Laws § 16-104-1 | In force | Students, Children, Marketing | Verified 2026-09-25 |
| Student Social Media Privacy(RI Student Social Media Privacy Act) | Rhode Island | R.I. Gen. Laws §§ 16-103-1 to 16-103-6 | In force | Students, Children | Verified 2026-09-25 |
| Telephone Sales Solicitation Act (telemarketer registration, do-not-call, robocalls and text advertising)(RI TSSA) | Rhode Island | R.I. Gen. Laws §§ 5-61-1 to 5-61-6; 11-35-26 | In force | Marketing, Communications | Verified 2026-09-25 |
| Unsolicited Fax Advertising and Unsolicited Commercial Email(RI Fax and Email Advertising Law) | Rhode Island | R.I. Gen. Laws §§ 6-47-1 to 6-47-3 | In force | Marketing, Communications | Verified 2026-09-25 |
| Urine and Blood Tests as a Condition of Employment(RI Workplace Drug Testing Law) | Rhode Island | R.I. Gen. Laws §§ 28-6.5-1 to 28-6.5-3 | In force | Employees, Health | Verified 2026-09-25 |
| Use of Artificial Intelligence by Healthcare Providers Notification Act(RI Healthcare AI Notification Act) | Rhode Island | R.I. Gen. Laws §§ 23-108-1 to 23-108-3 (P.L. 2026, ch. 199 and ch. 372) | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Video Voyeurism and Unauthorized Dissemination of Intimate Images (including digitally created images)(RI Voyeurism / NCII Law) | Rhode Island | R.I. Gen. Laws §§ 11-64-1 to 11-64-3 | In force | Other, Artificial intelligence, Communications | Verified 2026-09-25 |
| Video, Audio and Publication Rental Records Confidentiality (including library borrowing records)(RI Video and Library Records Law) | Rhode Island | R.I. Gen. Laws § 11-18-32 | In force | Marketing, Other | Verified 2026-09-25 |
| Anti-Phishing Act of 2006(Tenn. Anti-Phishing Act) | Tennessee | Tenn. Code Ann. §§ 47-18-5201 to 47-18-5205 (2006 Tenn. Pub. Acts ch. 566) | In force | Data security, Other | Verified 2026-09-25 |
| Artificial intelligence mental health professional representation ban(Tenn. AI Mental Health Representation Law) | Tennessee | Tenn. Code Ann. § 33-1-205; § 47-18-104(b) (2026 Tenn. Pub. Acts ch. 647, SB 1580/HB 1470) | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Consumer and protected-consumer security freeze(Tenn. Security Freeze) | Tennessee | Tenn. Code Ann. §§ 47-18-2108, 47-18-2109, 47-18-2111 | In force | Credit reporting, Children, Financial | Verified 2026-09-25 |
| Consumer Telemarketing Protection (automatic dialing and telephone solicitation)(Tenn. Telemarketing Protection Law) | Tennessee | Tenn. Code Ann. §§ 47-18-1501 to 47-18-1511, 47-18-1526, 47-18-1527 | In force | Marketing, Communications | Source changed, re-checking |
| Data Accessibility, Transparency and Accountability Act(Tenn. DATA Act) | Tennessee | Tenn. Code Ann. §§ 49-1-701 to 49-1-707 (2014 Tenn. Pub. Acts ch. 905) | In force | Students, Biometric, Government records | Verified 2026-09-25 |
| Electronic tracking of motor vehicles(Tenn. Vehicle Tracking Law) | Tennessee | Tenn. Code Ann. § 39-13-606 (as amended by 2016 Tenn. Pub. Acts ch. 860) | In force | Location | Verified 2026-09-25 |
| Employee Online Privacy Act of 2014(Tenn. Employee Online Privacy Act) | Tennessee | Tenn. Code Ann. §§ 50-1-1001 to 50-1-1004 (2014 Tenn. Pub. Acts ch. 826, SB 1808) | In force | Employees | Verified 2026-09-25 |
| Ensuring Likeness, Voice, and Image Security Act of 2024 (formerly Personal Rights Protection Act of 1984)(ELVIS Act) | Tennessee | Tenn. Code Ann. §§ 47-25-1101 to 47-25-1108 (as amended by 2024 Tenn. Pub. Acts ch. 588, HB 2091/SB 2096) | In force | Artificial intelligence, Biometric, Other | Verified 2026-09-25 |
| Financial Records Privacy Act(Tenn. FRPA) | Tennessee | Tenn. Code Ann. §§ 45-10-101 to 45-10-119 | In force | Financial | Verified 2026-09-25 |
| Genetic Information Privacy Act(Tenn. GIPA) | Tennessee | Tenn. Code Ann. §§ 47-18-4901 to 47-18-4906 (2023 Tenn. Pub. Acts ch. 324, HB 1310/SB 1295) | In force | Genetic, Health | Verified 2026-09-25 |
| Insurance Data Security Law(Tenn. Insurance Data Security Law) | Tennessee | Tenn. Code Ann. §§ 56-2-1001 to 56-2-1011 (2021 Tenn. Pub. Acts ch. 345, HB 766) | In force | Data security, Breach notification, Financial | Verified 2026-09-25 |
| Patient's Privacy Protection Act(Tenn. Patient's Privacy Protection Act) | Tennessee | Tenn. Code Ann. §§ 68-11-1501 to 68-11-1505 | In force | Health | Verified 2026-09-25 |
| Preventing Deepfake Images Act(Preventing Deepfake Images Act) | Tennessee | Tenn. Code Ann. §§ 39-17-1901 to 39-17-1906 (2025 Tenn. Pub. Acts ch. 466, SB 1346/HB 1299) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Protect Tennessee Minors Act(PTMA) | Tennessee | Tenn. Code Ann. § 39-17-912 (2024 Tenn. Pub. Acts ch. 1021, SB 1792/HB 1614; amended 2025 Tenn. Pub. Acts ch. 405) | In force | Children, Data security | Verified 2026-09-25 |
| Protected health information in legal advertising(Tenn. PHI Legal Solicitation Law) | Tennessee | Tenn. Code Ann. §§ 47-18-3001 to 47-18-3006 (2019 Tenn. Pub. Acts ch. 119) | In force | Health, Marketing | Verified 2026-09-25 |
| Protecting Children from Social Media Act(Protecting Children from Social Media Act) | Tennessee | Tenn. Code Ann. §§ 47-18-5701 to 47-18-5706 (2024 Tenn. Pub. Acts ch. 899, HB 1891) | In force | Children | Verified 2026-09-25 |
| Protecting social security numbers from disclosure(Tenn. SSN Protection) | Tennessee | Tenn. Code Ann. § 47-18-2110 | In force | Data security | Verified 2026-09-25 |
| Student Online Personal Protection Act(Tenn. SOPPA) | Tennessee | Tenn. Code Ann. § 49-1-708 (2016 Tenn. Pub. Acts ch. 757, HB 1931) | In force | Students, Children | Verified 2026-09-25 |
| Tennessee data breach notification law (Release of personal consumer information)(Tenn. Breach Notification) | Tennessee | Tenn. Code Ann. § 47-18-2107 | In force | Breach notification, Data security | Verified 2026-09-25 |
| Tennessee Do Not Call and text solicitation law(Tenn. Do Not Call Law) | Tennessee | Tenn. Code Ann. §§ 65-4-401 to 65-4-410 | In force | Marketing, Communications | Verified 2026-09-25 |
| Tennessee Information Protection Act(TIPA) | Tennessee | Tenn. Code Ann. §§ 47-18-3301 to 47-18-3315 (enacted as 2023 Tenn. Pub. Acts ch. 408, HB 1181/SB 73; amended 2025 Tenn. Pub. Acts ch. 201) | In force | Comprehensive privacy, Children, Health, Genetic, Biometric, Location | Verified 2026-09-25 |
| Tennessee wiretapping and electronic surveillance law (including cellular and cordless telephone recording)(Tenn. Wiretap Act) | Tennessee | Tenn. Code Ann. §§ 39-13-601, 39-13-602, 39-13-604 (former § 39-13-603 repealed 2024) | In force | Communications | Verified 2026-09-25 |
| Unmanned aircraft image capture and surveillance law(Tenn. Drone Surveillance Law) | Tennessee | Tenn. Code Ann. §§ 39-13-901 to 39-13-907 (2014 Tenn. Pub. Acts ch. 876, SB 1892) | In force | Location, Other | Verified 2026-09-25 |
| Unsolicited advertising by electronic means (commercial e-mail)(Tenn. Commercial Email Law) | Tennessee | Tenn. Code Ann. §§ 47-18-2501, 47-18-2502 | In force | Marketing | Source changed, re-checking |
| Video Consumer Privacy Act(Tenn. VCPA) | Tennessee | Tenn. Code Ann. §§ 47-18-2201 to 47-18-2205 | In force | Other, Marketing | Source changed, re-checking |
| Age Verification for Websites with Sexual Material Harmful to Minors (H.B. 1181)(Texas HB 1181) | Texas | Tex. Civ. Prac. & Rem. Code ch. 129B (129B.001-129B.006) | In force | Children, Artificial intelligence | Verified 2026-09-24 |
| App Store Accountability Act(Texas App Store Accountability Act) | Texas | Tex. Bus. & Com. Code ch. 121 (121.001-121.102), as added by S.B. 2420, 89th Leg., R.S. (2025) | In force | Children | Verified 2026-09-24 |
| Capture or Use of Biometric Identifier Act(CUBI) | Texas | Tex. Bus. & Com. Code 503.001 | In force | Biometric | Verified 2026-09-24 |
| Civil Action for Interception of Communication(Texas Civil Wiretap Remedy) | Texas | Tex. Civ. Prac. & Rem. Code ch. 123 (123.001-123.004) | In force | Communications | Verified 2026-09-24 |
| Consumer Protection Against Computer Spyware Act(Texas Spyware Act) | Texas | Tex. Bus. & Com. Code ch. 324 (324.001-324.102) | In force | Data security, Other | Verified 2026-09-24 |
| Cybersecurity Program Safe Harbor (S.B. 2610)(Texas Cybersecurity Safe Harbor) | Texas | Tex. Bus. & Com. Code ch. 542 (542.001-542.005) | In force | Data security, Breach notification | Verified 2026-09-24 |
| Disposal of Business Records Containing Personal Identifying Information(Texas Records Disposal Law) | Texas | Tex. Bus. & Com. Code 72.004; see also 72.051 | In force | Data security | Verified 2026-09-24 |
| Electronic Health Records Requirements (S.B. 1188)(Texas EHR Law (SB 1188)) | Texas | Tex. Health & Safety Code ch. 183 (183.001-183.012) | In force | Health, Data security, Artificial intelligence, Children | Verified 2026-09-24 |
| Genetic Information in Employment (Labor Code Subchapter H)(Texas Employment Genetic Privacy) | Texas | Tex. Lab. Code 21.401-21.405 | In force | Genetic, Employees | Verified 2026-09-24 |
| Identity Theft Enforcement and Protection Act (breach notification and sensitive personal information protection)(Texas Breach Notification Law) | Texas | Tex. Bus. & Com. Code ch. 521 (521.052, 521.053, 521.151) | In force | Breach notification, Data security | Verified 2026-09-24 |
| Insurance Code Privacy Chapter (Gramm-Leach-Bliley implementation)(Texas Insurance Privacy Law) | Texas | Tex. Ins. Code ch. 601 (601.001-601.102) | In force | Financial, Health | Verified 2026-09-24 |
| Invasive Visual Recording(Texas Invasive Visual Recording Law) | Texas | Tex. Penal Code 21.15 | In force | Other | Verified 2026-09-24 |
| Mental Health Records Confidentiality(Texas Mental Health Records Law) | Texas | Tex. Health & Safety Code ch. 611 (611.001-611.008) | In force | Health | Verified 2026-09-24 |
| Physician-Patient Communication (Medical Practice Act confidentiality)(Texas Physician-Patient Confidentiality) | Texas | Tex. Occ. Code ch. 159 (159.001-159.010) | In force | Health | Verified 2026-09-24 |
| Prohibited Use of Crime Victim or Motor Vehicle Collision Information(Texas Crime Victim Information Law) | Texas | Tex. Bus. & Com. Code ch. 504 (504.001-504.002) | In force | Marketing, Government records | Verified 2026-09-24 |
| Protection of Consumer Telephone Records(Texas Telephone Records Law) | Texas | Tex. Bus. & Com. Code ch. 306 (306.001-306.053) | In force | Communications | Verified 2026-09-24 |
| Protection of Driver's License and Social Security Numbers(Texas SSN Protection Law) | Texas | Tex. Bus. & Com. Code ch. 501 (501.001-501.102) | In force | Data security | Verified 2026-09-24 |
| Protection of Identifying Financial Information (card receipt truncation)(Texas Card Receipt Law) | Texas | Tex. Bus. & Com. Code 502.002 | In force | Financial, Data security | Verified 2026-09-24 |
| Regulation of Consumer Credit Reporting Agencies (including security freeze)(Texas Credit Reporting Law) | Texas | Tex. Bus. & Com. Code ch. 20 (20.01-20.31) | In force | Credit reporting, Financial | Verified 2026-09-24 |
| Regulation of Electronic Mail(Texas Commercial Email Law) | Texas | Tex. Bus. & Com. Code ch. 321 (321.001-321.114) | In force | Marketing | Verified 2026-09-24 |
| Regulation of Telephone Solicitation (registration with the Secretary of State)(Texas Telephone Solicitation Act) | Texas | Tex. Bus. & Com. Code ch. 302 (302.001-302.304) | In force | Marketing | Verified 2026-09-24 |
| Reidentification of Deidentified Information(Texas Reidentification Law) | Texas | Tex. Bus. & Com. Code ch. 506 (506.001-506.006) | In force | Government records, Data security | Verified 2026-09-24 |
| Securing Children Online through Parental Empowerment (SCOPE) Act(SCOPE Act) | Texas | Tex. Bus. & Com. Code ch. 509 (509.001-509.152) | In force | Children, Location, Marketing | Verified 2026-09-24 |
| Student Information Protection (school-purpose online operators)(Texas Student Data Privacy Law) | Texas | Tex. Educ. Code 32.151-32.157 | In force | Students, Children, Data security | Verified 2026-09-24 |
| Telephonic Communications Made for Purpose of Solicitation (state TCPA remedy)(Texas Mobile Solicitation Call Law) | Texas | Tex. Bus. & Com. Code ch. 305 (305.001-305.055) | In force | Marketing, Communications | Verified 2026-09-24 |
| Texas Data Broker Law(Texas Data Broker Law) | Texas | Tex. Bus. & Com. Code ch. 510 (510.001-510.010) (formerly ch. 509, redesignated 2025) | In force | Data brokers, Data security | Verified 2026-09-24 |
| Texas Data Privacy and Security Act(TDPSA) | Texas | Tex. Bus. & Com. Code ch. 541 (541.001-541.205) | In force | Comprehensive privacy | Verified 2026-09-24 |
| Texas Genomic Act of 2025(Texas Genomic Act) | Texas | Tex. Health & Safety Code ch. 174 (174.001-174.011) | In force | Genetic, Data security, Health | Verified 2026-09-24 |
| Texas Medical Records Privacy Act(Texas Medical Records Privacy Act) | Texas | Tex. Health & Safety Code ch. 181 (181.001-181.207) | In force | Health, Data security, Marketing | Verified 2026-09-24 |
| Texas Responsible Artificial Intelligence Governance Act(TRAIGA) | Texas | Tex. Bus. & Com. Code chs. 551-554 (H.B. 149, 89th Leg., R.S.) | In force | Artificial intelligence, Biometric, Government records | Verified 2026-09-24 |
| Texas Telemarketing Disclosure and Privacy Act (Texas no-call list)(Texas No-Call Act) | Texas | Tex. Bus. & Com. Code ch. 304 (304.001-304.259) | In force | Marketing | Verified 2026-09-24 |
| Texas Wiretap Law (Unlawful Interception, Use, or Disclosure of Communications)(Texas Wiretap Act) | Texas | Tex. Penal Code 16.02-16.05; Tex. Code Crim. Proc. art. 18A.502 | In force | Communications | Verified 2026-09-24 |
| Unlawful Installation of Tracking Device(Texas Tracking Device Law) | Texas | Tex. Penal Code 16.06 | In force | Location | Verified 2026-09-24 |
| Unlawful Production or Distribution of Certain Sexually Explicit Media (deepfakes)(Texas Deepfake Law) | Texas | Tex. Penal Code 21.165 | In force | Artificial intelligence, Other | Verified 2026-09-24 |
| Use of Genetic Information in Occupational Licensing(Texas Occupational Licensing Genetic Privacy) | Texas | Tex. Occ. Code ch. 58 (58.001-58.105) | In force | Genetic | Verified 2026-09-24 |
| Use of Genetic Testing Information by Health Benefit Plans(Texas Insurance Genetic Privacy) | Texas | Tex. Ins. Code ch. 546 (546.001-546.152) | In force | Genetic, Health | Verified 2026-09-24 |
| Americans with Disabilities Act, Title I medical examination and inquiry confidentiality provisions(ADA medical confidentiality) | Federal | 42 U.S.C. 12112(d); 29 CFR 1630.13-1630.14 | In force | Employees, Health | Verified 2026-09-25 |
| Cable Communications Policy Act of 1984, Section 631 (Protection of Subscriber Privacy)(Cable Act s.631) | Federal | 47 U.S.C. 551 | In force | Communications | Verified 2026-09-25 |
| Children's Internet Protection Act(CIPA) | Federal | 47 U.S.C. 254(h)(5)-(6), (l); 20 U.S.C. 9134(f); 47 CFR 54.520 | In force | Children, Students | Verified 2026-09-25 |
| Children's Online Privacy Protection Act of 1998 and COPPA Rule(COPPA) | Federal | 15 U.S.C. 6501-6506; 16 CFR Part 312 | In force | Children | Verified 2026-09-25 |
| Communications Act Section 222 (Customer Proprietary Network Information) and CPNI Rules(CPNI) | Federal | 47 U.S.C. 222; 47 CFR 64.2001-64.2011 | In force | Communications, Location, Breach notification | Verified 2026-09-25 |
| Computer Fraud and Abuse Act(CFAA) | Federal | 18 U.S.C. 1030 | In force | Data security, Other | Verified 2026-09-25 |
| Confidentiality of Substance Use Disorder Patient Records(42 CFR Part 2) | Federal | 42 U.S.C. 290dd-2; 42 CFR Part 2 | In force | Health | Verified 2026-09-25 |
| Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003(CAN-SPAM) | Federal | 15 U.S.C. 7701-7713; 16 CFR Part 316 | In force | Marketing | Verified 2026-09-25 |
| Cyber Incident Reporting for Critical Infrastructure Act of 2022(CIRCIA) | Federal | 6 U.S.C. 681-681g (Pub. L. 117-103, div. Y); proposed 6 CFR Part 226 | Enacted, not yet in force | Breach notification, Data security | Verified 2026-09-25 |
| Dodd-Frank Act Section 1033 and CFPB Personal Financial Data Rights Rule(Section 1033 Rule) | Federal | 12 U.S.C. 5533; 12 CFR Part 1033 | Blocked by a court | Financial | Verified 2026-09-25 |
| DOJ Data Security Program: Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons(DOJ Bulk Data Rule) | Federal | 28 CFR Part 202 (implementing Executive Order 14117 under IEEPA, 50 U.S.C. 1701-1706) | In force | Data brokers, Data security, Genetic, Biometric, Location, Health, Financial | Verified 2026-09-25 |
| Driver's Privacy Protection Act of 1994(DPPA) | Federal | 18 U.S.C. 2721-2725 | In force | Other, Government records | Verified 2026-09-25 |
| Electronic Communications Privacy Act, Title I (Wiretap Act)(Wiretap Act) | Federal | 18 U.S.C. 2510-2523 | In force | Communications, Employees | Verified 2026-09-25 |
| Electronic Communications Privacy Act, Title II (Stored Communications Act)(SCA) | Federal | 18 U.S.C. 2701-2713 | In force | Communications | Verified 2026-09-25 |
| Electronic Communications Privacy Act, Title III (Pen Register and Trap and Trace Devices)(Pen Register Act) | Federal | 18 U.S.C. 3121-3127 | In force | Communications | Verified 2026-09-25 |
| Employee Polygraph Protection Act of 1988(EPPA) | Federal | 29 U.S.C. 2001-2009; 29 CFR Part 801 | In force | Employees | Verified 2026-09-25 |
| Fair and Accurate Credit Transactions Act of 2003 (identity theft, disposal, truncation, affiliate marketing provisions)(FACTA) | Federal | Pub. L. 108-159; 15 U.S.C. 1681c(g), 1681c-1, 1681m(e), 1681s-3, 1681w; 16 CFR Parts 680, 681, 682 | In force | Credit reporting, Data security, Financial | Verified 2026-09-25 |
| Fair Credit Reporting Act(FCRA) | Federal | 15 U.S.C. 1681-1681x; 12 CFR Part 1022 (Regulation V) | In force | Credit reporting, Financial, Employees | Verified 2026-09-25 |
| Fair Debt Collection Practices Act, third-party communication limits (and Regulation F)(FDCPA) | Federal | 15 U.S.C. 1692c(b); 12 CFR Part 1006 | In force | Financial, Communications | Verified 2026-09-25 |
| Family Educational Rights and Privacy Act(FERPA) | Federal | 20 U.S.C. 1232g; 34 CFR Part 99 | In force | Students | Verified 2026-09-25 |
| Federal Trade Commission Act, Section 5 (unfair or deceptive acts or practices)(FTC Act) | Federal | 15 U.S.C. 45 | In force | Comprehensive privacy, Data security | Verified 2026-09-25 |
| FTC Health Breach Notification Rule(HBNR) | Federal | 42 U.S.C. 17937 (ARRA section 13407); 16 CFR Part 318 | In force | Health, Breach notification | Verified 2026-09-25 |
| Genetic Information Nondiscrimination Act of 2008(GINA) | Federal | Pub. L. 110-233; 42 U.S.C. 2000ff-2000ff-11 (Title II); 42 U.S.C. 300gg-53, 29 U.S.C. 1182 and related provisions (Title I); 29 CFR Part 1635 | In force | Genetic, Employees, Health | Verified 2026-09-25 |
| Gramm-Leach-Bliley Act, Title V (Privacy Rule, Safeguards Rule, and pretexting provisions)(GLBA) | Federal | 15 U.S.C. 6801-6809, 6821-6827; 12 CFR Part 1016 (Regulation P); 16 CFR Part 314 (FTC Safeguards Rule); 17 CFR Part 248 (SEC Regulation S-P) | In force | Financial, Data security, Breach notification | Verified 2026-09-25 |
| Health Information Technology for Economic and Clinical Health Act, Subtitle D (Privacy)(HITECH) | Federal | 42 U.S.C. 17921-17954 (Pub. L. 111-5, div. A, title XIII, subtitle D) | In force | Health, Breach notification, Data security | Verified 2026-09-25 |
| Health Insurance Portability and Accountability Act Administrative Simplification: Privacy, Security, and Breach Notification Rules(HIPAA) | Federal | 42 U.S.C. 1320d to 1320d-9; 45 CFR Parts 160 and 164 | In force | Health, Data security, Breach notification | Verified 2026-09-25 |
| Homebuyers Privacy Protection Act(HPPA) | Federal | Pub. L. 119-36 (Sept. 5, 2025); 15 U.S.C. 1681b(c)(4) | In force | Credit reporting, Marketing, Financial | Verified 2026-09-25 |
| Privacy Act of 1974(Privacy Act) | Federal | 5 U.S.C. 552a | In force | Government records | Verified 2026-09-25 |
| Privacy Rights of Satellite Subscribers(Satellite privacy s.338(i)) | Federal | 47 U.S.C. 338(i) | In force | Communications | Verified 2026-09-25 |
| Protecting Americans' Data from Foreign Adversaries Act of 2024(PADFA) | Federal | 15 U.S.C. 9901 (Pub. L. 118-50, div. I) | In force | Data brokers | Verified 2026-09-25 |
| Protection of Pupil Rights Amendment(PPRA) | Federal | 20 U.S.C. 1232h; 34 CFR Part 98 | In force | Students | Verified 2026-09-25 |
| Right to Financial Privacy Act of 1978(RFPA) | Federal | 12 U.S.C. 3401-3423 | In force | Financial, Government records | Verified 2026-09-25 |
| Telemarketing and Consumer Fraud and Abuse Prevention Act and Telemarketing Sales Rule (National Do Not Call Registry)(TSR) | Federal | 15 U.S.C. 6101-6108; 16 CFR Part 310 | In force | Marketing | Verified 2026-09-25 |
| Telephone Consumer Protection Act of 1991(TCPA) | Federal | 47 U.S.C. 227; 47 CFR 64.1200 | In force | Marketing, Communications | Verified 2026-09-25 |
| Telephone Records and Privacy Protection Act of 2006(TRPPA) | Federal | 18 U.S.C. 1039 | In force | Communications | Verified 2026-09-25 |
| Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act (TAKE IT DOWN Act)(TAKE IT DOWN Act) | Federal | Pub. L. 119-12 (May 19, 2025); 47 U.S.C. 223(h), 223a | In force | Other, Artificial intelligence, Children | Verified 2026-09-25 |
| Video Privacy Protection Act of 1988(VPPA) | Federal | 18 U.S.C. 2710 | In force | Other | Verified 2026-09-25 |
| Video Voyeurism Prevention Act of 2004(VVPA) | Federal | 18 U.S.C. 1801 | In force | Other | Verified 2026-09-25 |
| Age verification for material harmful to minors(Utah Age Verification Act) | Utah | Utah Code Title 78B, Chapter 3, Part 10 (78B-3-1001 to 78B-3-1008) | In force | Children, Other | Verified 2026-09-23 |
| App Store Accountability Act(Utah ASAA) | Utah | Utah Code Title 13, Chapter 76 (13-76-101 to 13-76-404) | Enacted, not yet in force | Children | Verified 2026-09-23 |
| Artificial Intelligence Applications Relating to Mental Health(Utah Mental Health Chatbot Act) | Utah | Utah Code Title 13, Chapter 72a; Utah Code 58-60-118 | In force | Artificial intelligence, Health | Verified 2026-09-23 |
| Artificial Intelligence Consumer Protection (generative AI disclosures)(Utah GenAI Disclosure Act) | Utah | Utah Code Title 13, Chapter 77 (13-77-101 to 13-77-106) | In force | Artificial intelligence | Verified 2026-09-23 |
| Artificial Intelligence Policy Act (Office of Artificial Intelligence Policy and Learning Laboratory)(Utah AI Policy Act) | Utah | Utah Code Title 13, Chapter 72 (13-72-101 to 13-72-403); repeal date at Utah Code 63I-2-213(2) | In force | Artificial intelligence | Verified 2026-09-23 |
| Child Protection Registry(Utah CPR) | Utah | Utah Code Title 13, Chapter 39 (13-39-101 to 13-39-304) | In force | Children, Marketing | Verified 2026-09-23 |
| Cybersecurity Affirmative Defense Act(Utah Cybersecurity Affirmative Defense Act) | Utah | Utah Code Title 78B, Chapter 4, Part 7 (78B-4-701 to 78B-4-706) | In force | Data security | Verified 2026-09-23 |
| Digital Content Provenance Standards Act(Utah Content Provenance Act) | Utah | Utah Code Title 13, Chapter 72c (13-72c-101 to 13-72c-301) | Enacted, not yet in force | Artificial intelligence | Verified 2026-09-23 |
| Digital Voyeurism Prevention Act(Utah DVPA) | Utah | Utah Code Title 13, Chapter 72b (13-72b-101 to 13-72b-401) | Enacted, not yet in force | Artificial intelligence, Other | Verified 2026-09-23 |
| Genetic Information Amendments (genetic sequencing data and foreign adversaries)(Utah H.B. 182 (2026)) | Utah | Laws of Utah 2026, ch. 70 (H.B. 182), enacting a section numbered 26B-2-244 in the enrolled bill (codified location unverified) | Enacted, not yet in force | Genetic, Health, Data security | Verified 2026-09-23 |
| Genetic Information Privacy Act (Part 1) and Genetic Testing and Procedure Privacy Act (Part 2)(Utah GIPA) | Utah | Utah Code Title 13, Chapter 60 (13-60-101 to 13-60-106; 13-60-203 to 13-60-207) | In force | Genetic, Employees | Verified 2026-09-23 |
| Motor Vehicle Consumer Data Protection(Utah Dealer Data Act) | Utah | Utah Code Title 13, Chapter 73 (13-73-101 to 13-73-203) | In force | Other | Verified 2026-09-23 |
| Notice of Intent to Sell Nonpublic Personal Information Act(Utah NPI Notice Act) | Utah | Utah Code Title 13, Chapter 37 (13-37-101 to 13-37-203) | In force | Other | Verified 2026-09-23 |
| Protection of Personal Information Act(Utah PPIA) | Utah | Utah Code Title 13, Chapter 44 (13-44-101 to 13-44-301) | In force | Breach notification, Data security | Verified 2026-09-23 |
| Social media private right of action for minors(Utah Social Media PRA) | Utah | Utah Code Title 78B, Chapter 3, Part 11 (78B-3-1101 to 78B-3-1106) | In force | Children | Verified 2026-09-23 |
| Student Data Protection Act (third-party contractor provisions)(Utah SDPA) | Utah | Utah Code Title 53E, Chapter 9, Part 3 (53E-9-301 to 53E-9-311) | In force | Students | Verified 2026-09-23 |
| Utah Commercial Email Act(Utah Commercial Email Act) | Utah | Utah Code Title 13, Chapter 65 (13-65-101 to 13-65-203) | In force | Marketing | Verified 2026-09-23 |
| Utah Consumer Privacy Act(UCPA) | Utah | Utah Code Title 13, Chapter 61 (13-61-101 to 13-61-504) | In force | Comprehensive privacy | Verified 2026-09-23 |
| Utah Digital Choice Act(Utah Digital Choice Act) | Utah | Utah Code Title 13, Chapter 81 (13-81-101 to 13-81-401) | In force | Other | Verified 2026-09-23 |
| Utah E-Commerce Integrity Act(Utah E-Commerce Integrity Act) | Utah | Utah Code Title 13, Chapter 40 (13-40-101 to 13-40-402) | In force | Communications, Other | Verified 2026-09-23 |
| Utah Minor Protection in Social Media Act(Utah MPSMA) | Utah | Utah Code Title 13, Chapter 71 (13-71-101 to 13-71-401) | Blocked by a court | Children | Verified 2026-09-23 |
| Automatic Dialing-Announcing Devices(VA ADAD law) | Virginia | Va. Code §§ 59.1-518.1 to 59.1-518.4 (Title 59.1, Chapter 44.1) | In force | Marketing, Communications | Verified 2026-09-25 |
| Automatic license plate recognition systems (law enforcement use and vendor duties)(VA ALPR law) | Virginia | Va. Code § 2.2-5517 (Title 2.2, Chapter 55.6) | In force | Government records, Location | Verified 2026-09-25 |
| Breach of medical information notification(VA medical breach notification) | Virginia | Va. Code § 32.1-127.1:05 | In force | Breach notification, Health, Government records | Verified 2026-09-25 |
| Breach of personal information notification(VA breach notification) | Virginia | Va. Code § 18.2-186.6 | In force | Breach notification | Verified 2026-09-25 |
| Confidentiality of HIV test results(VA HIV test confidentiality) | Virginia | Va. Code § 32.1-36.1 | In force | Health | Verified 2026-09-25 |
| Consumer Data Protection Act, social media platforms and minors (SB 854)(VA SB 854) | Virginia | Va. Code § 59.1-577.1 (and 'social media platform' definition in § 59.1-575) | Blocked by a court | Children, Comprehensive privacy | Verified 2026-09-25 |
| Consumer Reporting Agencies (security freezes; medical debt reporting ban)(VA credit freeze) | Virginia | Va. Code §§ 59.1-444.1 to 59.1-444.4 (Title 59.1, Chapter 35.1) | In force | Credit reporting, Financial, Children, Health | Verified 2026-09-25 |
| Fingerprinting in connection with business transactions(VA fingerprint return) | Virginia | Va. Code § 59.1-478 (Title 59.1, Chapter 42) | In force | Biometric | Verified 2026-09-25 |
| Genetic Data Privacy (direct-to-consumer genetic testing companies)(VA Genetic Data Privacy) | Virginia | Va. Code §§ 59.1-593 to 59.1-602 (Title 59.1, Chapter 56) | In force | Genetic, Health | Verified 2026-09-25 |
| Genetic information privacy in health insurance(VA insurance genetic privacy) | Virginia | Va. Code § 38.2-508.4 | In force | Genetic, Health, Financial | Verified 2026-09-25 |
| Genetic testing or genetic characteristics as a condition of employment(VA employer genetic testing) | Virginia | Va. Code § 40.1-28.7:1 | In force | Genetic, Employees | Verified 2026-09-25 |
| Health records privacy(VA health records privacy) | Virginia | Va. Code § 32.1-127.1:03 | In force | Health | Verified 2026-09-25 |
| Insurance Information and Privacy Protection Act and Insurance Data Security Act(VA insurance privacy) | Virginia | Va. Code §§ 38.2-600 to 38.2-620 (Art. 1) and 38.2-621 to 38.2-629 (Art. 2, Insurance Data Security Act) | In force | Financial, Data security, Breach notification, Health | Verified 2026-09-25 |
| Interception of Wire, Electronic or Oral Communications (Virginia wiretap act)(VA wiretap act) | Virginia | Va. Code §§ 19.2-61 to 19.2-70.3 (Title 19.2, Chapter 6), esp. §§ 19.2-62, 19.2-69, 19.2-70.3 | In force | Communications | Verified 2026-09-25 |
| Motor vehicle recording devices (event data recorders)(VA vehicle data recorders) | Virginia | Va. Code § 46.2-1088.6 | In force | Location, Other | Verified 2026-09-25 |
| Notification of tax return data breach (income tax return preparers)(VA tax preparer breach) | Virginia | Va. Code § 58.1-341.2 | In force | Breach notification, Financial | Verified 2026-09-25 |
| Personal Information Privacy Act (merchant sale of purchaser information, check DOB, driver's license scanning)(VA PIPA) | Virginia | Va. Code §§ 59.1-442 to 59.1-444 (Title 59.1, Chapter 35), excluding § 59.1-443.2 (listed separately) | In force | Other, Marketing | Verified 2026-09-25 |
| Prohibited use of employee's Social Security number(VA employee SSN) | Virginia | Va. Code § 40.1-28.7:10 | In force | Employees, Data security | Verified 2026-09-25 |
| Publishing or distributing material harmful to minors on the Internet (adult website age verification)(VA age verification) | Virginia | Va. Code § 8.01-40.5 | In force | Children | Verified 2026-09-25 |
| Release of employee's personal identifying information(VA employee PII release) | Virginia | Va. Code § 40.1-28.7:4 | In force | Employees | Verified 2026-09-25 |
| Restricted use of Social Security numbers(VA SSN protection) | Virginia | Va. Code § 59.1-443.2; enforcement via § 59.1-200(A)(43) (Virginia Consumer Protection Act) | In force | Data security | Verified 2026-09-25 |
| Social media accounts of current and prospective employees(VA employer social media) | Virginia | Va. Code § 40.1-28.7:5 | In force | Employees | Verified 2026-09-25 |
| Student personal information; school service providers and school-issued devices(VA student data privacy) | Virginia | Va. Code § 22.1-289.01 | In force | Students, Children, Location | Verified 2026-09-25 |
| Unauthorized use of electronic tracking device(VA tracking device) | Virginia | Va. Code § 18.2-60.5 | In force | Location | Verified 2026-09-25 |
| Unauthorized use of name, picture, voice, or likeness (statutory right of privacy and publicity)(VA right of publicity) | Virginia | Va. Code § 8.01-40 | In force | Other, Marketing, Artificial intelligence | Verified 2026-09-25 |
| Unlawful creation of image of another (voyeurism)(VA unlawful image creation) | Virginia | Va. Code § 18.2-386.1 | In force | Other | Verified 2026-09-25 |
| Unlawful dissemination or sale of images of another (including synthetic images)(VA intimate images) | Virginia | Va. Code § 18.2-386.2 | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Virginia Computer Crimes Act (privacy provisions: computer invasion of privacy, keystroke loggers, spam)(VA Computer Crimes Act) | Virginia | Va. Code §§ 18.2-152.1 to 18.2-152.15, esp. §§ 18.2-152.3:1, 18.2-152.4(A)(8), 18.2-152.5, 18.2-152.12 | In force | Data security, Marketing, Communications | Verified 2026-09-25 |
| Virginia Consumer Data Protection Act(VCDPA) | Virginia | Va. Code §§ 59.1-575 to 59.1-584 (Title 59.1, Chapter 53) | In force | Comprehensive privacy, Children, Location, Health, Biometric, Genetic | Verified 2026-09-25 |
| Virginia Consumer Protection Act, reproductive or sexual health information(VCPA reproductive health) | Virginia | Va. Code § 59.1-200(A)(85); definitions in § 59.1-198; remedies §§ 59.1-203, 59.1-204, 59.1-206 | In force | Health, Location | Verified 2026-09-25 |
| Virginia Telephone Privacy Protection Act(VTPPA) | Virginia | Va. Code §§ 59.1-510 to 59.1-518.01 (Title 59.1, Chapter 44) | In force | Marketing, Communications | Verified 2026-09-25 |
| Confidentiality of Prescription Information (Prescriber Data Law)(VT Prescription Confidentiality Law) | Vermont | 18 V.S.A. § 4631 | Blocked by a court | Health, Marketing | Verified 2026-09-25 |
| Disclosure of Protected Health Information Prohibited (Health Care Privacy)(VT Health Care Privacy) | Vermont | 18 V.S.A. § 1881 (18 V.S.A. ch. 42B) | In force | Health | Verified 2026-09-25 |
| Disclosure of Sexually Explicit Images Without Consent(VT NCII Law) | Vermont | 13 V.S.A. § 2606 | In force | Other, Artificial intelligence | Verified 2026-09-25 |
| Document Safe Destruction Act(VT Document Destruction Act) | Vermont | 9 V.S.A. § 2445 | In force | Data security | Verified 2026-09-25 |
| Educational Technology Provider Registration(VT EdTech Registration) | Vermont | 9 V.S.A. ch. 62, subch. 3B (9 V.S.A. § 2444a), added by 2026 Acts and Resolves No. 138 (H.211), Sec. 4 | Enacted, not yet in force | Students, Children | Verified 2026-09-25 |
| Employment Based on Credit Information; Prohibitions(VT Employment Credit Check Law) | Vermont | 21 V.S.A. § 495i | In force | Employees, Credit reporting, Financial | Verified 2026-09-25 |
| Genetic Information Privacy Act(VT GIPA) | Vermont | 9 V.S.A. §§ 2421a-2421d (9 V.S.A. ch. 61A), added by 2026 Acts and Resolves No. 135 (H.639) | In force | Genetic, Health | Verified 2026-09-25 |
| Genetic Testing Protections(VT Genetic Testing Law) | Vermont | 18 V.S.A. ch. 217 (18 V.S.A. §§ 9331-9335) | In force | Genetic, Employees, Health | Verified 2026-09-25 |
| Polygraph Protection Act(VT Polygraph Protection Act) | Vermont | 21 V.S.A. §§ 494-494e | In force | Employees | Verified 2026-09-25 |
| Prohibited Uses of Artificial Intelligence in Mental Health Services(VT AI Mental Health Law) | Vermont | 18 V.S.A. § 7115, added by 2026 Acts and Resolves No. 156 (H.816); see also 3 V.S.A. § 129a and 26 V.S.A. § 1354 as amended | In force | Artificial intelligence, Health | Verified 2026-09-25 |
| Security Breach Notice Act(VT SBNA) | Vermont | 9 V.S.A. § 2435 (definitions at 9 V.S.A. § 2430) | In force | Breach notification | Verified 2026-09-25 |
| Social Media Account Privacy (Employers)(VT Employee Social Media Privacy) | Vermont | 21 V.S.A. § 495l | In force | Employees | Verified 2026-09-25 |
| Social Security Number Protection Act(VT SSN Act) | Vermont | 9 V.S.A. § 2440 | In force | Data security, Government records | Verified 2026-09-25 |
| Student Privacy (Student Online Personal Information Protection)(VT Student Privacy) | Vermont | 9 V.S.A. ch. 62, subch. 3A (9 V.S.A. §§ 2443-2443f) | In force | Students, Children | Verified 2026-09-25 |
| Synthetic Media in Elections(VT Election Deepfake Law) | Vermont | 17 V.S.A. §§ 2031-2033, 2041-2042 (17 V.S.A. ch. 35, subchs. 4-5), added by 2026 Acts and Resolves No. 75 (S.23) | In force | Artificial intelligence, Other | Verified 2026-09-25 |
| Vermont Age-Appropriate Design Code Act(VT AADC) | Vermont | 9 V.S.A. ch. 62, subch. 6 (9 V.S.A. §§ 2449a-2449j), added by 2025 Acts and Resolves No. 63 (S.69) | Enacted, not yet in force | Children, Artificial intelligence, Location | Verified 2026-09-25 |
| Vermont Data Broker Law (including the Data Broker Security Breach Notice Act)(VT Data Broker Law) | Vermont | 9 V.S.A. §§ 2430, 2431, 2436, 2446-2447 (9 V.S.A. ch. 62, subchs. 1, 2 and 5) | In force | Data brokers, Data security, Breach notification | Verified 2026-09-25 |
| Vermont Data Privacy and Online Surveillance Act(VDPOSA) | Vermont | 9 V.S.A. ch. 61A, subch. 1 (9 V.S.A. §§ 2415a-2415k), added by 2026 Acts and Resolves No. 145 (S.71) | Enacted, not yet in force | Comprehensive privacy, Health, Biometric, Genetic, Location, Children, Artificial intelligence | Verified 2026-09-25 |
| Vermont Electronic Communication Privacy Act(VECPA) | Vermont | 13 V.S.A. ch. 232 (13 V.S.A. §§ 8101-8108) | In force | Communications, Government records, Location | Verified 2026-09-25 |
| Vermont Fair Credit Reporting Act (including security freeze and medical debt provisions)(VT FCRA) | Vermont | 9 V.S.A. §§ 2480a-2480n, 2466d, 2483-2483b | In force | Credit reporting, Financial, Health | Verified 2026-09-25 |
| Vermont Financial Privacy Act(VT Financial Privacy) | Vermont | 8 V.S.A. §§ 10201-10206 | In force | Financial | Verified 2026-09-25 |
| Vermont Telemarketing, Do-Not-Call and Robocall Law(VT Telemarketing Law) | Vermont | 9 V.S.A. §§ 2464a-2464c, 2464e | In force | Marketing, Communications | Verified 2026-09-25 |
| Voyeurism(VT Voyeurism Law) | Vermont | 13 V.S.A. § 2605 | In force | Communications, Other | Verified 2026-09-25 |
| Workplace Drug Testing Law(VT Drug Testing Law) | Vermont | 21 V.S.A. §§ 511-520 | In force | Employees, Health | Verified 2026-09-25 |
| Illinois Biometric Information Privacy Act(BIPA) | Illinois | -- | In force | Not yet verified |
Recent federal rulemaking
- Privacy Act RegulationsProposed Rule · Commodity Futures Trading Commission · 2026-09-21
- Improving the Effectiveness of the Robocall Mitigation Database; Call Authentication Trust Anchor; Advanced Methods To Target and Eliminate Unlawful RobocallsProposed Rule · Federal Communications Commission · 2026-09-09
- 9-11 Response and Biometric Entry-Exit Fee for H-1B and L-1 VisasRule · Homeland Security Department · 2026-08-10
- Privacy Act of 1974; ImplementationRule · Defense Department, Office of the Secretary · 2026-07-16
- Enhancing Know-Your-Upstream-Provider Requirements and Strengthening STIR/SHAKEN (Call Authentication Trust Anchor; Advanced Methods To Target and Eliminate Unlawful Robocalls)Proposed Rule · Federal Communications Commission · 2026-07-09
- Proposed Rule for Privacy Act ExemptionsProposed Rule · Treasury Department · 2026-06-17
- Combatting Illegal Robocalls Through FCC Numbering Policies; Implementation of TRACED Act-Knowledge of Customers by Entities With Access to Numbering ResourcesProposed Rule · Federal Communications Commission · 2026-05-08
- Privacy Act RegulationsProposed Rule · Commodity Futures Trading Commission · 2026-05-06
Source: the Federal Register API, updated daily.
How this library is kept
Entries are researched against official sources (legislature code sites, the eCFR and the Federal Register, and enforcing agencies), and each one lists the sources it was checked against and the date. Older entries marked “Not yet verified” are being checked the same way. Bills come daily from Open States (state legislatures) and Congress.gov, and rules from the Federal Register. A bill appears once its title is clearly about privacy or a person has reviewed it. Each law’s official page is re-read weekly; when it changes, the entry is flagged for re-checking rather than edited automatically.