Data privacy laws take effect during 2023 in California, Virginia, Colorado, Utah, and Connecticut. Specifically:

  • California Privacy Rights Act, effective January 1, 2023
  • Virginia Consumer Data Protection Act, effective January 1, 2023
  • Colorado Privacy Act, effective July 1, 2023
  • Connecticut Data Privacy Act, effective July 1, 2023
  • Utah Consumer Privacy Act, effective December 31, 2023

Other states are actively considering the implementation of a comprehensive privacy law.

Currently, the United States does not have a federal data privacy law. In May 2022, a bipartisan group of legislators introduced the American Data Privacy and Protection Act (“ADPPA”), which includes federal preemption of state laws with some exceptions, such as a limited private right of action for certain privacy violations.

As we enter the last quarter of 2022, make preparations to comply with the new state data privacy laws.