Data Privacy Laws by State: What’s the Latest in 2021?
2021 has already seen a few significant developments as more and more states are enacting and revising their data privacy legislation. Let’s have a look at the latest updates and review data privacy laws by state.
U.S. Privacy Law Status
Data Privacy Laws by State
California Privacy Rights Act (CPRA)
California Privacy Rights Act, passed by voters in November 2020, will go into effect in 2023. It focuses heavily on businesses’ responsibilities in guarding customer data, online privacy for children and the threat of identity theft among other things. To learn more about CPRA, visit caprivacy.org.
Fore more information about California Consumer Privacy Act (CCPA), check out our resources:
Virginia Consumer Data Protection Act (VCDPA)
The Virginia Consumer Data Protection Act (VCDPA), which will go into effect January 1, 2023. The main difference between CCPA and VCDPA is the ability to sue the company if Virginians deem it responsible for violating their privacy rights.
According to the legislators:
“The bill applies to all persons that conduct business in the Commonwealth and either (i) control or process personal data of at least 100,000 consumers or (ii) derive over 50 percent of gross revenue from the sale of personal data and control or process personal data of at least 25,000 consumers. The bill outlines responsibilities and privacy protection standards for data controllers and processors… The bill grants consumer rights to access, correct, delete, and obtain a copy of personal data and to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling of the consumer.”
Washington State Privacy Act
Washington state’s Washington Privacy Act 2021 (SB 5062) passed the state Senate in a 48-1 vote and is currently in the House committee. According to Sen. Reuven Carlyle (D-Seattle), the SB 5062 sponsor,
“The Washington Privacy Act takes the best practices from leading evidence-based policies worldwide and creates explicit new rights.”
Other states
To track the progress of data privacy legislation in other states, visit the International Association of Privacy Professionals (IAPP).