The Indiana Consumer Data Protection Act (INCDPA) establishes a comprehensive privacy framework granting Indiana residents rights over their personal data, including access, correction, deletion, and opt-out rights for targeted advertising, data sales, and profiling….
Posts by Category: Data Protection & Privacy
Louisiana Enacts Consumer Data Privacy Law
Louisiana has enacted the Louisiana Data Privacy Act (LDPA), becoming the 22nd U.S. state to adopt a comprehensive consumer data privacy law. Signed in May 2026 and effective January 1, 2027, the law grants consumers rights to access, correct, delete, and opt out of…
Delaware’s Privacy Law is About to Expand: 6 Steps Employers and Businesses Should Take to Prepare
Delaware’s comprehensive privacy law is set to take effect, granting residents new rights over their personal information, including the ability to access, correct, delete, and obtain copies of data collected about them. The law also allows consumers to opt out of…
New State Privacy Laws Signal Growing Partisan Divide
There are a wave of new state privacy laws taking effect across the United States, signaling continued expansion of consumer data protection requirements beyond early adopters such as California, Virginia, and Colorado. Emerging laws introduce broader consumer rights,…
State Privacy Laws Show the SECURE Data Act’s Merits and Political Appeal
The SECURE Data Act reflects a bipartisan, state‑driven consensus on privacy. It rejects assumptions that stricter rules are inherently better, noting that most states favor flexible data‑minimization standards, centralized enforcement by the FTC and attorneys…
Privacy in Bloom: Four States Reshape the Data Protection Landscape This Spring
Four states are reshaping U.S. privacy law through new legislation and enforcement efforts. Oklahoma and Alabama enacted comprehensive consumer privacy laws, while Virginia banned the sale of precise geolocation data. California regulators also backed stronger…
Navigating The Kentucky Consumer Data Protection Act: A Compliance Guide for Businesses
The Kentucky Consumer Data Protection Act (KCDPA), which recently took effect, introduces new rights for consumers and obligations for businesses handling personal data. It grants individuals rights to access, correct, delete, and obtain copies of their data, as well…
Data Inventories: A First Step for Practical Privacy Compliance
Data inventories are a foundational step for practical privacy compliance, enabling organizations to understand what personal data they collect, how it is used, where it is stored, and with whom it is shared. A well-maintained inventory supports legal obligations,…
IAPP Global Privacy Summit 2026: State AI Trends, FTC Signals, California’s DROP Build-Out, and the Hard Work of Cookie Compliance
At the 2026 IAPP Global Privacy Summit, regulators and experts emphasized that privacy compliance must move from theory to operational practice, especially as AI and data use grow more complex. Key themes included increased state-level AI regulation focused on…
State Enforcers Step Up Scrutiny of Foreign Data Transfers: What Organizations Should Know
State regulators are increasing scrutiny of foreign data transfers, especially involving sensitive personal data like biometric, location, and health information. With no comprehensive federal privacy law, states are stepping up enforcement and targeting companies…


