Privacy laws U.S. by consumer rights covered 2025| ��ƽ��

State laws on data privacy in the United States as of February 2025, by consumer rights covered

Privacy laws	Right to access	Right to correct	Right to delete	Right to opt out of certain processing	Right to portability	Right to opt out of sales	Right to opt in for sensitive data processing	Right against automated decision making	Private right of action
California Consumer Privacy Act (effective - Jan 1, '20)	Yes	Yes	Yes	Sensitive data	Yes	Yes	No	Yes	Limited to certain violations only
Colorado Privacy Act (effective - Jul 1, '23)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Connecticut Data Privacy Act (effective - Jul 1, '23)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Delaware Personal Data Privacy Act (effective - Jan 1 '25)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Indiana Consumer Data Protection Act (effective - Jan 1, '26)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Iowa Consumer Data Protection Act (effective - Jan 1, '25)	Yes	No	Yes	No	Yes	Yes	No	No	No
Kentucky Consumer Data Protection Act (effective - Jan 1, '26)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Maryland Online Data Privacy Act (effective - Oct 1, '25)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Minnesota Consumer Data Privacy Act (effective - July 31, '25)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Montana Consumer Data Privacy Act (effective - Oct 1, '24)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Nebraska Data Privacy Act (effective - Jan 1, '25)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
New Hampshire Privacy Act (effective- Jan 1, '25)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
New Jersey Data Protection Act (effective- Jan 15, '25)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Oregon Consumer Privacy Act (effective - Jul 1, '24)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Rhode Island Data Transparency and Privacy Protection Act (effective - 1 Jan. '26)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Tennessee Information Protection Act (effective - 1 Jul, '25)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Texas Data Privacy and Security Act (effective - 1 Jul, '24)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No
Utah Consumer Privacy Act (effective - 31 Dec, '23)	Yes	No	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	No	No	No
Virginia Consumer Data Protection Act (effective - 1 Jan, '23)	Yes	Yes	Yes	Right to opt-out of processing for profiling/targeted advertising purposes	Yes	Yes	Yes	Yes	No

Download

Source

Show detailed source information?

Already a member?

Source

Release date

February 2025

More information

Region

United States

Survey time period

February 2025

Citation formats

As of February 2025, 19 states in the U.S. had state-level privacy laws signed. All signed laws protect the right of a consumer to access personal information collected by companies and shared with third parties. The first state-level privacy law proposed in California in 2018 had gaps, as it did not reference the consumer's right to request a correction of incorrect or outdated personal information and other rights. However, the second privacy law developed afterward in the state, the California Privacy Rights Act, was more comprehensive. Other consumer rights, such as the consumer's right to opt out of specific processing and the right to opt in for sensitive data processing, were rarely protected, too.

Additionally, only one of the signed laws covered the consumer's private right of action, with certain limitations.