Thirteen states have enacted comprehensive consumer privacy laws that create new rights for consumers, impose obligations on businesses that handle consumers’ personal data, and create new mechanisms to enforce those laws.
In 2023, the number of states that passed comprehensive privacy legislation more than doubled from the previous year. Eight states: Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, and Texas passed comprehensive privacy laws.