All of the Comprehensive Privacy Laws That Take Effect in 2026
All of the Comprehensive Privacy Laws That Take Effect in 2026
Publish Date: 2026-02-04 16:26:00
Source Domain: www.multistate.us
Key Takeaways:
- In 2026, twenty states have comprehensive privacy laws in effect, with new laws in Indiana, Kentucky, and Rhode Island joining the landscape and several state privacy law amendments taking effect.
- Key comprehensive privacy law effective dates this year include January 1 for Indiana, Kentucky, and Rhode Island, July 1 for Connecticut, Arkansas, and Utah, and August 1 for new California data broker registration requirements.
- California expanded its data broker registration requirements, mandating more detailed disclosures and streamlined deletion request processing, while also enacting new consumer health data privacy protections.
- States like Connecticut and Arkansas have tightened privacy protections for minors, with new age-appropriate design code requirements and restrictions on the sale and use of minors’ personal data.
- Looking ahead, additional state privacy laws and age-appropriate design code measures are set to take effect in 2027, while some proposals, such as New York’s Health Information Privacy Act, did not advance.
While no new comprehensive state privacy laws were passed in 2025, lawmakers were far from idle. Several states amended existing privacy frameworks last year, and a number of previously enacted laws and regulations are now coming into force in 2026 and beyond. What follows is a practical rundown of the most important effective dates and substantive changes privacy teams should have on their radar.
How Many States Have Comprehensive Privacy Laws in 2026?
Twenty states now have comprehensive privacy laws on the books (counting Florida, which has a narrower scope than other state privacy laws).
Privacy Laws Taking Effect January 1, 2026
New comprehensive privacy laws in Indiana (IN SB 5), Kentucky (KY HB 15), and Rhode Island (RI HB 7787/SB 2500) take effect. All…
