privacy laws

Updated 1/31/25

The information provided on this page is compiled from various publicly available sources and is intended for general informational purposes only. While we strive to keep this content accurate and up to date, data privacy laws are subject to change, and interpretations may vary.

It is the marketer’s responsibility to conduct further research and ensure full compliance with each applicable law. We strongly recommend reviewing the official government websites and consulting with a legal professional to understand how these regulations apply to your specific business operations.

Plan Bee Direct does not provide legal advice and assumes no liability for any actions taken based on the information presented here.

US States

As of January 2025, several U.S. states have enacted comprehensive consumer data privacy laws to protect individuals’ personal information. Here’s an overview of these states (in order by date) and their respective laws:

California

  • Law: California Consumer Privacy Act (CCPA)- Effective Date: January 1, 2020- Overview: rants California residents rights to know about, access, and delete their personal information collected by businesses.- More Information: California Attorney General’s Office

Virginia

  • Law: Virginia Consumer Data Protection Act (VCDPA)- Effective Date: January 1, 2023- Overview: Provides Virginia residents rights to access, correct, delete, and obtain a copy of personal data held by businesses.- More Information: Virginia’s Legislative Information System

Colorado

  • Law: Colorado Privacy Act (CPA)- Effective Date: July 1, 2023- Overview: Allows Colorado residents to access, correct, delete, and opt out of the sale of their personal data.- More Information: Colorado General Assembly

Connecticut

  • Law: Connecticut Data Privacy Act (CTDPA)- Effective Date: July 1, 2023- Overview: Provides Connecticut residents rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Connecticut General Assembly

Utah

  • Law: Utah Consumer Privacy Act (UCPA)- Effective Date: December 31, 2023- Overview: rants Utah residents’ rights to access, delete, and opt out of the sale of personal data.- More Information: Utah State Legislature

Iowa

  • Law: Iowa Consumer Data Protection Act (ICDPA)- Effective Date: January 1, 2025- Overview: Provides Iowa residents rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Iowa Legislature

Indiana

  • Law: Indiana Consumer Data Protection Act (INCDPA)- Effective Date: January 1, 2025- Overview: rants Indiana residents rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Indiana General Assembly

Tennessee

  • Law: Tennessee Information Protection Act (TIPA)- Effective Date: July 1, 2025- Overview: Provides Tennessee residents rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Tennessee General Assembly

Texas

  • Law: Texas Data Privacy and Security Act (TDPSA)- Effective Date: July 1, 2024- Overview: rants Texas residents rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Texas Legislature

Florida

  • Law: Florida Privacy Protection Act (FPPA)- Effective Date: July 1, 2024- Overview: Provides Florida resident’s rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Florida Senate

Montana

  • Law: Montana Consumer Data Privacy Act (MCDPA)- Effective Date: October 1, 2024- Overview: rants Montana residents rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Montana Legislature

Oregon

  • Law: Oregon Consumer Privacy Act (OCPA)- Effective Date: July 1, 2024- Overview: Provides Oregon residents rights to access, correct, delete, and opt out of the sale of personal data.- More Information: Oregon State Legislature

Delaware

  • Law: Delaware Personal Data Privacy Act (DPDPA)- Effective Date: January 1, 2025 – Overview: Establishes privacy rights for Delaware residents and imposes obligations on businesses that collect and process personal data. More Information: Deleware General Assembly

States That Restrict Disclosure of Religion in Marketing Lists

  • California
  • Colorado
  • Connecticut
  • Delaware
  • Indiana
  • Iowa
  • Montana
  • Oregon
  • Texas
  • Utah
  • Virginia

Additional Info

Here’s a overview of consumer data privacy laws in some other countries, including key regulations: These laws vary by country and region, so businesses operating internationally should ensure compliance with each jurisdiction’s data protection regulations.

Canada

  • Law: Personal Information Protection and Electronic Documents Act (PIPEDA)
  • Overview:
    • Governs how private-sector organizations collect, use, and disclose personal information.
    • Grants individuals the right to access and correct their data.
    • Requires businesses to obtain consent before collecting or using personal data.
  • More Information: Office of the Privacy Commissioner of Canada

European Union (EU) & European Economic Area (EEA)

  • Law: General Data Protection Regulation (GDPR)
  • Overview:
    • One of the world’s strictest data privacy laws, applying to all businesses processing the personal data of EU citizens.
    • Grants individuals rights to access, correct, delete, and transfer their personal data.
    • Requires businesses to obtain clear consent before collecting or processing personal data.
  • More Information: Official GDPR Website

United Kingdom

  • Law: UK General Data Protection Regulation (UK GDPR) & Data Protection Act 2018
  • Overview:
    • After Brexit, the UK retained GDPR principles under UK GDPR.
    • Governs how businesses collect, use, and store personal data.
    • Provides individuals with data access, correction, and deletion rights.
  • More Information: UK Information Commissioner’s Office (ICO)

Australia

  • Law: Australian Privacy Act 1988 & Notifiable Data Breaches Scheme
  • Overview:
    • Applies to businesses with an annual turnover of over AUD 3 million.
    • Grants individuals rights to access and correct personal data.
    • Requires organizations to notify individuals of data breaches.
  • More Information: Office of the Australian Information Commissioner (OAIC)

New Zealand

  • Law: Privacy Act 2020
  • Overview:
    • Regulates the collection, use, and disclosure of personal information.
    • Requires businesses to inform individuals how their data will be used.
    • Introduces mandatory breach notifications.
  • More Information: New Zealand Privacy Commissioner