The passage of the California Consumer Privacy Act in 2018 set a domino effect in motion for comprehensive privacy laws legislation across the United States. Without an overarching federal privacy law, state legislatures have stepped in to fill the gap. With each passing year, more state legislatures have passed privacy laws that follow three distinctive models of different levels of consumer data protection: the Virginia model (basic), the Colorado model (enhanced), and the California model (comprehensive).
This rapid adoption of state laws has transformed the U.S. privacy framework in both depth and complexity. At Baker Donelson, we recognize the importance of understanding the intricacy of this evolving legislative landscape. Therefore, we have developed comprehensive summaries that identify key similarities and divergencies across core components of these state privacy laws, including applicability thresholds, exemptions, business obligations, consumer rights, and enforcement priorities. These guides seek to help companies navigate the ever-changing requirements of state privacy laws.
Last Updated: January 2025
Click for state-specific guides.