·
Applies to businesses controlling/processing data of at least 35,000 Rhode Island consumers, or 10,000 consumers if at least 20% of gross revenue is from the sale of personal data.
Has notably lower thresholds than other 2026 laws. Reportedly does not include a cure period. Covers commercial websites and ISPs.
Amends UCPA (applies to businesses with $25M+ revenue and 100k consumers or 25k if 50% revenue from sale). Specific provisions for social media companies.
Grants consumers the right to correct inaccurate personal data. Enacts data portability and interoperability requirements for social media services.
Applies to all registered Data Brokers in California (businesses selling personal info without a direct consumer relationship).
Mandates use of the CPPA accessible deletion mechanism; requires processing of requests within 45 days. Expands disclosure to include GenAI sharing.
Applies to commercial operators of websites or online services targeted at children or teens, or those with actual knowledge of collecting their data.
Prohibits targeted advertising to minors. Requires verifiable consent for teens aged 13-16. Modeled on "COPPA 2.0" framework.
Applies to online services with actual knowledge of minor users or where at least 2% of users are minors. Thresholds were reportedly broadened in 2026.
Requires high default privacy settings for minors. Limits data targeting. Part of the Age-Appropriate Online Design Code Act.
Applies to businesses that control/process data of at least 100,000 Indiana consumers, or 25,000 consumers if more than 50% of gross revenue is derived from the sale of personal data.
Enforcement is exclusive to the Attorney General; provides no private right of action. Contains a 30-day right to cure.
Applies to businesses that control/process data of at least 100,000 Kentucky consumers, or 25,000 consumers if more than 50% of gross revenue is derived from the sale of personal data.
Enforcement is exclusive to the Attorney General. Includes a mandatory cure period and creates a specific consumer privacy fund.
Amends the OCPA (which generally applies to businesses with 100k consumers or 25k if 25% revenue from sale). Specific 2026 prohibitions apply to minor data and precise geolocation.
Prohibits sale of minor data (<16) and precise geolocation (1,750-foot radius). The OCPA 30-day right to cure expired Jan 1, 2026.
Lowers the general processing threshold to 35,000 consumers (from 100,000) and removes numerical thresholds for certain types of high-risk processing.
Requires specific notices for data used to train AI models and implements new safety and design requirements for services used by minors.
Applies to any business conducting business in California that owns or licenses computerized personal information.
Establishes a strict 30-day deadline for consumer breach notifications and a 15-day deadline for reporting to the Attorney General.
Applies to businesses controlling/processing data of at least 35,000 Maryland consumers, or 10,000 consumers if at least 20% of gross revenue is from the sale of personal data.
Enforcement phase begins April 1, 2026. Bans the sale of sensitive data for individuals of any age. Considered one of the strictest US privacy laws.
Applies to entities using, developing, or deploying AI systems in Texas. Incorporates thresholds and requirements from existing Texas privacy statutes.
Prohibits harmful AI uses and clarifies biometric consent rules. Establishes a regulatory framework for AI governance in the state.
Applies to any entity controlling or processing biometric data of Colorado consumers, regardless of general CPA numerical thresholds.
Specific provisions for biometric identifiers and children's privacy become effective in February 2026. Requires explicit consent for biometric processing.
Applies to businesses meeting CCPA thresholds ($25M+ revenue, 100k+ consumers, or 50%+ revenue from sale/share).
Introduces mandatory risk assessments and cybersecurity audits. Establishes new rules for consumer consent and opt-out rights.
Made with Webhound · Ask questions about this research, build on it, or start your own
Ask Webhound about this research, build on it, or start your own
Start free