Nebraska Data Privacy Act (LB 1074)

Nebraska’s privacy law covers any non small business serving Nebraska residents, regardless of data volume.

New Hampshire Data Privacy Act (SB 255)

New Hampshire’s privacy law applies at low thresholds and requires notices, consumer rights, and universal opt-out signal support.

Montana’s privacy law now applies at 25,000 consumers, with universal opt-out signals required and no right to cure.

Florida’s privacy law targets billion dollar platforms but its sensitive data notice and children’s protections reach much further.

Oregon’s privacy law lets consumers demand the specific list of third parties that received their data, with almost no entity exemptions.

Texas applies its privacy law to nearly every non small business and enforces it among the most aggressively of any state.

Utah’s light-touch privacy law covers larger businesses with basic access, deletion, and opt-out rights.

Colorado requires privacy notices, consumer rights, and universal opt-out signal support for businesses processing large volumes of consumer data.

Connecticut’s privacy law requires notices, consent for sensitive data, and opt-outs, with 2025 amendments expanding coverage to smaller businesses.

Virginia’s VCDPA is the template most states copied, requiring notices, consumer rights, consent for sensitive data, and opt-outs.