HomeSearch

Lenses
Business lenslens
Certifying body lenslens
End user / data subject lenslens
Front-line staff lenslens
Government lenslens
Human rights / privacy advocate lenslens
Policymaker (Government lens)lens
Regulator / enforcer (Government lens)lens
Africa
Egyptplanned
Ghanaplanned
Kenyaplanned
Moroccoplanned
Nigeriaplanned
Rwandaplanned
South Africaplanned
Asia-Pacific
Australiaplanned
Chinadrafting
Hong Kongplanned
Indiaplanned
Indonesiaplanned
Japanplanned
Malaysiaplanned
New Zealandplanned
Philippinesplanned
Singaporeplanned
South Koreaplanned
Thailandplanned
Vietnamplanned
Europe
European Uniondrafting
Switzerlandplanned
Türkiyeplanned
United Kingdomplanned
Latin America
Argentinaplanned
Brazilplanned
Chileplanned
Colombiaplanned
Peruplanned
Uruguayplanned
Middle East
Bahrainplanned
Israelplanned
Qatarplanned
Saudi Arabiaplanned
United Arab Emiratesplanned
North America
Canadaplanned
Mexicoplanned
United States (federal)drafting
United States
Californiadrafting
Coloradoplanned
Connecticutplanned
Delawareplanned
Floridaplanned
Indianaplanned
Iowaplanned
Kentuckyplanned
Marylandplanned
Minnesotaplanned
Montanaplanned
Nebraskaplanned
New Hampshireplanned
New Jerseyplanned
Ohioplanned
Oregonplanned
Rhode Islandplanned
Tennesseeplanned
Texasplanned
Utahplanned
Virginiaplanned
Menu

United States (federal)

Coverage draftingAlso: USA, America, FTC, HIPAA, GLBA, COPPA

VERIFIED 2026-09-24 · REVIEW BY 2027-01-15

Twenty states have comprehensive consumer privacy laws in force, and this site lists those twenty alongside Ohio, whose safe-harbour statute is a different kind of law. Four more are enacted with later start dates: Louisiana and Oklahoma on 1 January 2027, Alabama on 1 May 2027 and Vermont on 1 January 2028. Totals quoted elsewhere differ because they count enacted laws rather than laws in force.

Instruments

No instrument recorded for United States (federal) yet.

Regulator

Exercisable rights

No general federal right of access or deletion. Rights depend on your state and on the sector holding the data

Through each lens

End user / data subject

What can I actually do about this today, and what does it cost me.

No end user / data subject analysis for United States (federal) yet.

Business

What does this obligate us to build, and by when.

No business analysis for United States (federal) yet.

Government

Government is one lens carrying two sub-lenses, each with judicial reviewability analysis.

No government analysis for United States (federal) yet.

Policymaker

What did the drafters intend, and what did the text achieve.

No policymaker analysis for United States (federal) yet.

Regulator / enforcer

What can this authority make stick on appeal.

No regulator / enforcer analysis for United States (federal) yet.

Certifying body

What is the scope of what we are attesting to.

No certifying body analysis for United States (federal) yet.

Front-line staff

What do I do when this lands on my desk.

No front-line staff analysis for United States (federal) yet.

Human rights / privacy advocate

Who does this regime fail, and can that be shown.

No human rights / privacy advocate analysis for United States (federal) yet.

Within this jurisdiction

Sources

  1. FTC · retrieved 2026-09-14 · https://www.ftc.gov/business-guidance/privacy-security
  2. IAPP US State Privacy Legislation Tracker, tracker last updated 8 September 2026 · retrieved 2026-09-24 · https://iapp.org/resources/article/us-state-privacy-legislation-tracker/
  3. Venable, 2026 mid-year state privacy law update, Louisiana and Oklahoma 1 January 2027; Alabama 1 May 2027; Vermont 1 January 2028 · retrieved 2026-09-24 · https://www.venable.com/insights/publications/2026/07/2026-mid-year-state-privacy-law-update