US Data Privacy Guide | White & Case LLP
US Data Privacy Guide | White & Case LLP
https://www.whitecase.com/insight-our-thinking/us-data-privacy-guide
Publish Date: 2026-04-03 03:00:00
Source Domain: www.whitecase.com
Explore Trendscape
Our take on the interconnected global trends that are shaping the business climate for our clients.
In 2019, the US data privacy framework changed significantly with the emergence of the California Consumer Privacy Act which created a significant compliance burden for most businesses that collect personal information about California residents. Since then, activity at the state level has increased as more states look to establish data privacy laws in the absence of a comprehensive data privacy law at the federal level. Currently, a total of twenty states have enacted comprehensive data privacy laws in the United States: California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Florida, Maryland, Minnesota, Montana, Oregon, Delaware, New Hampshire, New Jersey, Kentucky, Nebraska, and Rhode Island. This US Data Privacy Guide provides insight on these and other US data privacy laws and regulations.
View content by year
2026
Oklahoma enacts comprehensive data privacy law
A comprehensive bill strengthening data privacy protections for Oklahomans has been signed into law. Senate Bill 546 (the “Oklahoma Data Privacy Act” or the “Act”) will become effective January 1, 2027. The Act establishes new consumer rights regarding personal data and creates clear rules for businesses that collect and process information from Oklahoma residents, including rights available to consumers under similar US state data privacy laws. Oklahoma’s enactment continues the rapid national momentum in state-level consumer data privacy regulation. In this latest in our series of articles on US State Data Privacy Laws, we summarize the key components of the Oklahoma Data Privacy Act. Read full here »
California Privacy Protection Agency issues $1.10 million fine against youth sports media platform over CCPA opt-out and consumer notice failures
On March 3, 2026, the California Privacy Protection Agency (CPPA or “Agency”) Board issued a decision…