US State Privacy Legislation Tracker

Bills introduced 2021

Business
Consumer Rights
Obligations

Prohibition on Discrimination (exercising rights)

Right Against Automated Decision Making

Notice/Transparency Requirement

Purpose/Processing Limitation
Opt-in requirement age
Private Right of Action
Right of Rectification

Right of Restriction
Right of Portability

Risk Assessments
Right of Deletion

Right of Opt-Out
Right of Access
Legislative Statute/Bill
State Process (Hyperlinks) Common Name
LAWS PASSED (TO DATE)
California Consumer Privacy Act
California CCPA x x x x L 16 x x
(2018; effective Jan. 1, 2020)
California Privacy Rights Act (2020;
California I Proposition 24 x x x x x x x L 16 x x x x
effective Jan. 1, 2023)
Colorado SB 190 x x x x x x~ s x x x x
Virginia SB 1392 *Consumer Data Protection Act x x x x x x 13 x x x x
ACTIVE BILLS
Massachusetts SD 1726 Massachusetts Information Privacy Act x x x x x in x x all x x x
Minnesota HF 1492 Minnesota Consumer Data Privacy Act x x x x x x s x x x x
New York A 680 New York Privacy Act x x x x x in x x x x
New York S 6701 New York Privacy Act x x x x x in x x x x
New York II
A 6042 Digital Fairness Act x x x in x x all x a x x
New York II
SB 567 x x x x x x x
North Carolina SB 569 Consumer Privacy Act x x x x x x~ x s x x x x
Ohio HB 376 Ohio Personal Privacy Act x x x x 13 x x x
Pennsylvania HB 1126 x x x L 16 x x
FAILED BILLS
Alabama HB 216 Alabama Consumer Privacy Act x x x x 18 x x x
Alaska SB 116 Consumer Data Privacy Act x x x x 18 x x x
Arizona HB 2865 x x x x x x x u x
Connecticut SB 893 x x x x x x x x x
Florida SB 1734 Florida Privacy Protection Act x x x x x 18 x x
Florida HB 969 x x x x x x 16 x x x
Illinois HB 3910 Consumer Privacy Act x x x x 18 x x x x
Kentucky HB 408 x 16 x x
Maryland Online Consumer
Maryland SB 0930 x x x x x x
Protection Act
Minnesota HF 36 x x x x x x x x
Mississippi SB 2612 Mississippi Consumer Privacy Act x x x x x x x
North Dakota HB 1330 in x x
Oklahoma Computer Data
Oklahoma HB 1602 x x x all x x
Privacy Act
Texas HB 3741 x x x x x x
Utah SB 200 Consumer Privacy Act x x x x x x s x x x x
Washington SB 5062 Washington Privacy Act 2021 x x x x x x x x x x x
Washington HB 1433 People's Privacy Act x x x x x in x x x x x
West Virginia HF 3159 x x x x x x 16 x x
L - private right of action for security violations only
Introduced
In Committee
Crossed Chamber
Cross Committee
Passed
Signed

in - opt-in consent requirement

p - prohibition without consent
Bold - passed law u - unclear
In Session: all
Strikethrough - bill died in committee or postponed s - opt-in requirement for all sensitive data
above states
* Continued to 2021 Special Session a - risk assesment limited to impact of automated
decisions
~ - right to opt out of certain automated
decisionmaking
I
California Privacy Rights Act’s right of restriction/limitation is only applicable to sensitive personal data
II
Companion bills introduced at different time during legislative session

Legislative Process: Introduced > In Committee > Crossed Chamber > Cross Committee > Passed > Signed

Further information and most recent version of the IAPP’s US State Comprehensive Privacy Law Comparison can be found here.

Last updated: 9/16/2021