Delaware’s comprehensive privacy law is set to take effect, granting residents new rights over their personal information, including the ability to access, correct, delete, and obtain copies of data collected about them. The law also allows consumers to opt out of…
Posts by Category: Data Protection & Privacy
New State Privacy Laws Signal Growing Partisan Divide
There are a wave of new state privacy laws taking effect across the United States, signaling continued expansion of consumer data protection requirements beyond early adopters such as California, Virginia, and Colorado. Emerging laws introduce broader consumer rights,…
State Privacy Laws Show the SECURE Data Act’s Merits and Political Appeal
The SECURE Data Act reflects a bipartisan, state‑driven consensus on privacy. It rejects assumptions that stricter rules are inherently better, noting that most states favor flexible data‑minimization standards, centralized enforcement by the FTC and attorneys…
Privacy in Bloom: Four States Reshape the Data Protection Landscape This Spring
Four states are reshaping U.S. privacy law through new legislation and enforcement efforts. Oklahoma and Alabama enacted comprehensive consumer privacy laws, while Virginia banned the sale of precise geolocation data. California regulators also backed stronger…
Navigating The Kentucky Consumer Data Protection Act: A Compliance Guide for Businesses
The Kentucky Consumer Data Protection Act (KCDPA), which recently took effect, introduces new rights for consumers and obligations for businesses handling personal data. It grants individuals rights to access, correct, delete, and obtain copies of their data, as well…
Data Inventories: A First Step for Practical Privacy Compliance
Data inventories are a foundational step for practical privacy compliance, enabling organizations to understand what personal data they collect, how it is used, where it is stored, and with whom it is shared. A well-maintained inventory supports legal obligations,…
IAPP Global Privacy Summit 2026: State AI Trends, FTC Signals, California’s DROP Build-Out, and the Hard Work of Cookie Compliance
At the 2026 IAPP Global Privacy Summit, regulators and experts emphasized that privacy compliance must move from theory to operational practice, especially as AI and data use grow more complex. Key themes included increased state-level AI regulation focused on…
State Enforcers Step Up Scrutiny of Foreign Data Transfers: What Organizations Should Know
State regulators are increasing scrutiny of foreign data transfers, especially involving sensitive personal data like biometric, location, and health information. With no comprehensive federal privacy law, states are stepping up enforcement and targeting companies…
Oklahoma’s New Consumer Privacy Law and Data Breach Updates: What Businesses Need to Know
Oklahoma enacted the Oklahoma Consumer Data Privacy Act, signed on March 20, 2026, which takes effect January 1, 2027, adding the state to the growing list of comprehensive privacy regimes. The law applies to businesses meeting specific data‑processing thresholds and…
The Compliance Tightrope: Balancing Uniformity and Precision Across U.S. State Consumer Privacy Laws
U.S. businesses face growing challenges in complying with a rapidly expanding patchwork of state consumer privacy laws, due to the absence of a single federal framework. While many states share similar core consumer rights, key differences in definitions, thresholds,…


