top of page

With US data privacy laws differing state by state, what do you need to know?

Updated: Mar 30, 2023

While the wait is on for a comprehensive federal data privacy law, many states have taken matters into their own hands.


The US is experiencing a massive drive toward pushing privacy legislation at the state level. As we entered 2023, two new US state privacy laws came into effect on January 1 and three additional new privacy laws will come into effect later this year. Clearly it’s something businesses will need to think about and update their privacy plans. This is non-negotiable and it's complicated, but that is why eXate is make it a bit easier!

So, what do you need to know?


California Consumer Privacy Act (CCPA)

In June 2018, the CCPA was signed into law, creating new privacy rights for Californians. The CCPA came into effect on January 1st, 2020.

California Privacy Rights Act (CPRA)

The CPRA, a ballot initiative that amends the CCPA and includes additional privacy protections for consumers, CPRA will came into effect on January 1, 2023.

Virginia Consumer Data Protection Act (VCDPA)

VCDPA came into effect on January 1, 2023 and gives consumers the right to access their personal data and request that it be deleted by businesses. It also requires companies to conduct data protection assessments related to processing personal data for targeted advertising and sales purposes.

Colorado Privacy Act (CPA)

In June 2020, Colorado became the third U.S. state to pass a privacy law. The Colorado Privacy Act grants Colorado residents rights over their data and places obligations on data controllers and processors.

Connecticut Data Privacy Act (CTDPA)

The CTDPA has many similarities with other states privacy laws (California, Virginia, Colorado and Utah), it gives certain rights over personal data and establishes responsibilities and privacy protection standards for data controllers that process personal data.

Utah Consumer Privacy Act (UCPA)

In March 2022, Utah became the fourth state to enact a comprehensive consumer privacy law, which will take effect on December 31, 2023. The UCPA draws from the CDPA, CPA, and CPRA.


If you are struggling with how to implement state-by-state data privacy regulation, then we are happy to assist.

Request a Demo

Schedule a demo with one of our product experts today to learn about APIgator and how eXate automates and applies privacy and security to sensitive data in the right place and in the right form.



Commenting has been turned off.
bottom of page