US state privacy laws and effective dates
Every state comprehensive consumer privacy law, plus state AI, biometric, health data and cybersecurity laws.
29 states with tracked laws. Tap one to open it.
State privacy law effective dates
56 regulations
Add to calendar
56 of 56 regulations
Connecticut Data Privacy Act (CTDPA)Connecticut · AmendedOct 1, 2026 PA 26-64 (SB 4) amendments take effectin 5 days
Utah App Store Accountability ActUtah · In forceDec 31, 2026 Private right of action beginsin 3 months
California AI Auditor RegistryCalifornia · EnactedJan 1, 2027 Act takes effectin 3 months
California AI Transparency Act (SB 942)California · AmendedJan 1, 2027 Large online platform and hosting platform dutiesin 3 months
California Digital Age Assurance ActCalifornia · EnactedJan 1, 2027 Age signal duties beginin 3 months
California SB 53 (TFAIA)California · In forceJan 1, 2027 First OES anonymized incident report and CDT definition reviewin 3 months
California SB 976 addictive feedsCalifornia · In forceJan 1, 2027 Age assurance duty and AG rulesin 3 months
CCPA / CPRACalifornia · AmendedJan 1, 2027 ADMT requirements compliance datein 3 months
Colorado AI ActColorado · EnactedJan 1, 2027 ADMT obligations applyin 3 months
Delaware Personal Data Privacy Act (DPDPA)Delaware · AmendedJan 1, 2027 Amended thresholds and third-party duties take effectin 3 months
- Louisiana Data Privacy ActLouisiana · EnactedJan 1, 2027 Louisiana Data Privacy Act takes effectin 3 months
- New Hampshire Privacy ActNew Hampshire · AmendedJan 1, 2027 Ban on selling personal data of children under 13 (HB 1460)in 3 months
NY RAISE ActNew York · EnactedJan 1, 2027 RAISE Act takes effectin 3 months
- Oklahoma OKCDPAOklahoma · EnactedJan 1, 2027 Oklahoma Consumer Data Privacy Act takes effectin 3 months
Utah UCPAUtah · AmendedJan 1, 2027 UCPA extends to motor vehicle manufacturersin 3 months
Vermont Kids CodeVermont · EnactedJan 1, 2027 Takes effectin 3 months
NY SAFE for Kids ActNew York · EnactedJan 25, 2027 Act and rules take effectin 4 months
California Delete Act / DROPCalifornia · In forceJan 31, 2027 Annual data broker registration deadlinein 4 months
Maryland Online Data Privacy Act (MODPA)Maryland · AmendedApr 1, 2027 Discretionary 60-day cure period endsin 6 months
Alabama Personal Data Protection Act (APDPA)Alabama · EnactedMay 1, 2027 APDPA takes effectin 7 months
California SB 243 (companion chatbots)California · In forceJul 1, 2027 First annual report to Office of Suicide Preventionin 9 months
Utah AI Policy ActUtah · AmendedJul 1, 2027 Scheduled repeal of Title 13, Ch. 72in 9 months
Vermont VDPOSAVermont · EnactedJan 1, 2028 Vermont Data Privacy and Online Surveillance Act takes effectin 1 year
- Minnesota Consumer Data Privacy Act (MCDPA)Minnesota · In forceJul 31, 2029 Postsecondary institutions must complyin 2 years
- Arkansas COPPA 2.0Arkansas · In forceEffective Jul 1, 20262 months ago
California AB 2013 (AI training data transparency)California · In forceEffective Jan 1, 20268 months ago
California ADS employment regulationsCalifornia · In forceEffective Oct 1, 202512 months ago
California AI autonomous-harm defense banCalifornia · In forceEffective Jan 1, 20268 months ago
California social media account deletionCalifornia · In forceEffective Jan 1, 20268 months ago
Colorado Privacy Act (CPA)Colorado · AmendedEffective Jul 1, 20233 years ago
Florida Digital Bill of RightsFlorida · In forceEffective Jul 1, 20242 years ago
Illinois AI in Employment Law (HB 3773)Illinois · In forceEffective Jan 1, 20268 months ago
Illinois BIPAIllinois · AmendedEffective Oct 3, 200817 years ago
- Indiana Consumer Data Protection Act (ICDPA)Indiana · In forceEffective Jan 1, 20268 months ago
Iowa Consumer Data Protection Act (ICDPA)Iowa · In forceEffective Jan 1, 20251 year ago
Kentucky Consumer Data Protection Act (KCDPA)Kentucky · In forceEffective Jan 1, 20268 months ago
- Louisiana app store age verification lawLouisiana · In forceEffective Jul 1, 20262 months ago
Maryland Kids CodeMaryland · In forceEffective Oct 1, 20241 year ago
Montana Consumer Data Privacy Act (MCDPA)Montana · AmendedEffective Oct 1, 20241 year ago
Nebraska Kids CodeNebraska · In forceEffective Jan 1, 20268 months ago
Nebraska NDPANebraska · In forceEffective Jan 1, 20251 year ago
- Nevada consumer health data lawNevada · In forceEffective Mar 31, 20242 years ago
New Jersey NJDPANew Jersey · AmendedEffective Jan 15, 20251 year ago
NY Algorithmic Pricing Disclosure ActNew York · In forceEffective Nov 10, 202510 months ago
NY Child Data Protection ActNew York · In forceEffective Jun 20, 20251 year ago
NYC Local Law 144 (AEDT)New York City, New York · In forceEffective Jul 5, 20233 years ago
NYDFS Cybersecurity Regulation (Part 500)New York · AmendedEffective Mar 1, 20179 years ago
Oregon OCPAOregon · AmendedEffective Jul 1, 20242 years ago
Rhode Island RIDTPPARhode Island · In forceEffective Jan 1, 20268 months ago
Tennessee ELVIS ActTennessee · In forceEffective Jul 1, 20242 years ago
Tennessee TIPATennessee · In forceEffective Jul 1, 20251 year ago
Texas App Store Accountability ActTexas · EnactedEffective Jan 1, 20268 months ago
Texas TDPSATexas · In forceEffective Jul 1, 20242 years ago
TRAIGATexas · In forceEffective Jan 1, 20268 months ago
Virginia VCDPAVirginia · AmendedEffective Jan 1, 20233 years ago
- Washington My Health My Data ActWashington · In forceEffective Mar 31, 20242 years ago