All 50 states have data security regulations, in addition to federal laws.

Since the implementation of GDPR in Europe (May 25, 2018), 4 states have passed new legislation, and at least 22 states have proposed legislation or have enaced study bills. In addition, at least 8 federal laws are currently proposed.

  • ERI Facility
  • New Legislation
    • California California Consumer Privacy Act
    • Nevada SB220
    • Maine Act to Protect Privacy of Online Consumer Information
    • New York SHIELD Act
  • Proposed Legislation/Task Force Establishment
    • Connecticut RB1108 (TF)
    • Florida H963 (DNP)
    • Hawaii HB2572
    • Illinois Data Transparency & Privacy Act
    • Louisiana HR249 (TF)
    • Maryland Online Consumer Protection Act
    • Massachusetts SD311/S120 (TF)
    • Minnesota Consumer Data Privacy Act
    • Mississippi Consumer Privacy Act (DNP)
    • Nebraska Consumer Data Privacy Act
    • New Hampshire HB1680
    • New Jersey A2188
    • New Mexico Consumer Information Privacy Act (DNP)
    • New York NY Privacy Act
    • North Dakota HB1485 (TF)
    • Pennsylvania Consumer Data Privacy Act (DNP)
    • Rhode Island Consumer Privacy Protection Act (DNP)
    • South Carolina Biometric Data Privacy Act
    • Texas Privacy Protection Act (TF)
    • Virginia Privacy Act (DNP)
    • Washington Privacy Act (DNP)
    • Wisconsin Data Privacy Act
    • US House (Moran) Consumer Data Privacy & Security Act
    • US Senate (Cantwell) Consumer Online Privacy Rights Act
    • US Senate (Gillibrand) Data Protection Act
    • US Senate (Klobuchar) Social Media Privacy & Consumer Rights Act
    • US Senate (Rubio) American Data Dissemination Act
    • US Senate (Schatz) Data Care Act
    • US Senate (Warren) Data Breach Prevention and Compensation Act
    • US Senate (Wicker) Consumer Data Privacy Act

DNP: bill died or postponed.     TF: replaced with Task Force or Study Bill

Important Resources