| | Since the passage of the California Consumer Privacy Act (“CCPA”) in 2018 and its amendment in 2020 by the California Privacy Rights Act (“CPRA”), a rapidly-increasing number of U.S. states have passed comprehensive data privacy legislation that broadly protects the personal data of their residents and gives residents a wide range of rights and choices with regard to the collection and use of their personal data. Modeled after the CCPA/CPRA, these new state data privacy laws provide state residents a wide range of rights with respect to their personal data, including the right to know what personal data is being collected and how it is used by the business through disclosures in a privacy policy, the right to correct or delete their personal data held by the business, and the right to opt-out of sales of their personal data. In 2023 alone, comprehensive data privacy laws became effective in four states (Colorado, Connecticut, Utah and Virginia). 2024 will see comprehensive data privacy laws go into effect in Montana, Oregon, and Texas. The following is a brief overview of the key points of each of these new state data privacy laws going into effect in 2024.
|