Recap: Data Privacy and Security Laws
The winds of change have blown in and state legislatures are taking action to protect consumers from data misuse. These data privacy and security laws focus on protecting individuals’ information and require organizations to handle data transparently and responsibly. Staying informed about these rules is essential for compliance and data protection.
Do these new laws apply to my organization?
These laws primarily target businesses who’s activities activities involve the collection, use, or sale of consumer personal data. Some laws require additional protections for sensitive data or contain exceptions for certain business activities, like those that are regulated by other data privacy/security laws.
Each state has slightly different thresholds for compliance that relate to the following:
- The amount of consumer data your organization processes (typically 50-100,000 consumers data
- Whether your annual revenue exceeds $25 million
- CA, TX, UT
- Whether 50% or more of your revenue comes from data sales
Below is a list of 2023’s new US state privacy and security laws to date, when they passed, and when they go into effect
- California Privacy Rights Act (CPRA): November 3, 2020, January 1, 2023
- Colorado Privacy Act (CPA): July 7, 2021, July 1, 2023
- Connecticut Data Privacy Act (CDPA): June 16, 2021, October 1, 2023
- Delaware Personal Data Privacy Act (DPDPA): July 31, 2021, January 1, 2025
- Indiana Consumer Data Protection Act (ICDPA): April 29 2021, January 1, 2025
- Montana Consumer Data Privacy Act (MCDPA): May 6, 2021, October 1, 2024
- Oregon Consumer Data Privacy Act (OCDPA): June 29, 2021, July 1, 2024
- Tennessee Information Protection Act (TIPA): May 11, 2023, January 1, 2024
- Texas Data Privacy and Security Act (TDPSA): June 18, 2023, July 1, 2024
- Utah Consumer Privacy Act (UCPA): March 24, 2023, December 31, 2024
- Virginia Consumer Data Protection Act (VCDPA): March 2, 2021, January 1, 2023
- Active bills to watch:
- Massachusetts, New Hampshire, New Jersey, North Carolina, Pennsylvania, Wisconsin
What do businesses have to do under these new laws?
