US state privacy law timeline
Privacy legislation in the United States (US) continues to evolve, especially at state level. The following table provides a general timeline for the states that have enacted privacy laws and their effective dates.
| State | Legislation | Effective Date |
|---|---|---|
| California | California Consumer Privacy Act (CCPA) | January 1, 2020 |
| California | California Privacy Rights Act (CPRA) | January 1, 2023 |
| Colorado | Colorado Privacy Act | July 1, 2023 |
| Connecticut | Connecticut Data Privacy Act | July 1, 2023 |
| Delaware | Delaware Personal Data Privacy Act | January 1, 2025 |
| Indiana | Indiana Consumer Data Protection Act | January 1, 2026 |
| Iowa | Iowa Consumer Data Protection Act | January 1, 2025 |
| Montana | Montana Consumer Data Privacy Act | October 1, 2024 |
| Oregon | Oregon Consumer Privacy Act | July 1, 2024 |
| Tennessee | Tennessee Information Protection Act | July 1, 2025 |
| Texas | Texas Data Privacy and Security Act | July 1, 2024 |
| Utah | Utah Consumer Privacy Act | December 31, 2023 |
| Virginia | Virginia Consumer Data Protection Act | January 1, 2023 |