One Country, Many Privacy Laws

A state-by-state look at privacy laws in effect and on the way.

The U.S. data privacy landscape is rapidly evolving as new legislation takes shape across the country. With over 20 states now enforcing active omnibus data privacy laws, organizations are navigating an increasingly complex compliance environment. This state-by-state momentum is scheduled to continue, as Alabama, Louisiana, and Oklahoma activate new laws in 2027, followed by Vermont in 2028. For any business collecting consumer data across state lines, proactively adapting to these legal requirements is a crucial operational priority.

This data is updated as of September 24, 2026