Delstatlig personvernrett i USA, lov for lov

Nitten delstater har en heldekkende personvernlov. Tabellen viser anvendelsesdato, terskelen slik lovteksten skriver den og om teksten gir rett til retting. Hver rad lenker til lovteksten hos delstatens egen utgiver.

Lest mot kilde 2026-08-22 · 19

Delstat	Lov	Gjelder fra	Terskel i teksten	Retting	Lovtekst
CO	Colorado Privacy Act Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313	2023-07-01	100,000 consumers, or 25,000 consumers with revenue or a discount from the sale of personal data.	Ja	leg.colorado.gov
CT	Connecticut CTDPA Conn. Gen. Stat. §§ 42-515 to 42-525	2023-07-01	100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.	Ja	www.cga.ct.gov
DE	Delaware DPDPA Del. Code tit. 6, ch. 12D	2025-01-01	35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.	Ja	delcode.delaware.gov
FL	Florida Digital Bill of Rights Fla. Stat. § 501.701 et seq.	2024-07-01	Global gross revenue above 1,000,000,000 dollars together with one of the stated business criteria.	Ja	www.flsenate.gov
IN	Indiana CDPA Ind. Code § 24-15	2026-01-01	100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.	Ja	iga.in.gov
IA	Iowa ICDPA Iowa Code ch. 715D	2025-01-01	100,000 consumers, or 25,000 consumers with revenue from the sale of personal data.	Står ikke	www.legis.iowa.gov
KY	Kentucky KCDPA Ky. Rev. Stat. §§ 367.3611 to 367.3639	2026-01-01	100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.	Ja	apps.legislature.ky.gov
MD	Maryland MODPA Md. Code, Com. Law § 14-4601 et seq.	2025-10-01	35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.	Ja	mgaleg.maryland.gov
MN	Minnesota MCDPA Minn. Stat. § 325O.01 et seq.	2025-07-31	100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.	Ja	www.revisor.mn.gov
MT	Montana MTCDPA Mont. Code § 30-14-2801 et seq.	2024-10-01	50,000 consumers, or 25,000 consumers with revenue from the sale of personal data.	Ja	archive.legmt.gov
NE	Nebraska NDPA Neb. Rev. Stat. § 87-1101 et seq.	2025-01-01	No consumer number threshold. Applies to entities that are not small businesses under the SBA definition.	Ja	nebraskalegislature.gov
NH	New Hampshire Privacy Act N.H. Rev. Stat. ch. 507-H	2025-01-01	35,000 consumers, or 10,000 consumers with more than a quarter of gross revenue from the sale of personal data.	Ja	www.gencourt.state.nh.us
NJ	New Jersey NJDPA N.J.S.A. 56:8-166.4 et seq.	2025-01-15	100,000 consumers, or 25,000 consumers where the controller receives any benefit from the sale of personal data.	Ja	pub.njleg.state.nj.us
OR	Oregon OCPA Or. Rev. Stat. §§ 646A.570 to 646A.589	2024-07-01	100,000 consumers, or 25,000 consumers with more than a quarter of annual revenue from the sale of personal data.	Ja	www.oregonlegislature.gov
RI	Rhode Island DTPPA R.I. Gen. Laws ch. 6-48.1	2026-01-01	35,000 customers, or 10,000 customers with more than a fifth of gross revenue from the sale of personal data.	Ja	webserver.rilegislature.gov
TN	Tennessee TIPA Tenn. Code § 47-18-3201 et seq.	2025-07-01	Revenue above 25,000,000 dollars together with a consumer volume threshold.	Ja	www.capitol.tn.gov
TX	Texas TDPSA Tex. Bus. & Com. Code ch. 541	2024-07-01	No consumer number threshold. Applies to any entity doing business in Texas that is not a small business under the SBA definition.	Ja	statutes.capitol.texas.gov
UT	Utah UCPA Utah Code §§ 13-61-101 to 13-61-404	2023-12-31	Annual revenue of 25,000,000 dollars or more, together with a consumer volume threshold.	Står ikke	le.utah.gov
VA	Virginia CDPA Va. Code §§ 59.1-575 to 59.1-585	2023-01-01	100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.	Står ikke	law.lis.virginia.gov

CO · Gjelder fra 2023-07-01
Colorado Privacy Act
Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313
100,000 consumers, or 25,000 consumers with revenue or a discount from the sale of personal data.
Retting: Ja
Offisiell lovtekst
CT · Gjelder fra 2023-07-01
Connecticut CTDPA
Conn. Gen. Stat. §§ 42-515 to 42-525
100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
DE · Gjelder fra 2025-01-01
Delaware DPDPA
Del. Code tit. 6, ch. 12D
35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
FL · Gjelder fra 2024-07-01
Florida Digital Bill of Rights
Fla. Stat. § 501.701 et seq.
Global gross revenue above 1,000,000,000 dollars together with one of the stated business criteria.
Retting: Ja
Offisiell lovtekst
IN · Gjelder fra 2026-01-01
Indiana CDPA
Ind. Code § 24-15
100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
IA · Gjelder fra 2025-01-01
Iowa ICDPA
Iowa Code ch. 715D
100,000 consumers, or 25,000 consumers with revenue from the sale of personal data.
Retting: Står ikke
Offisiell lovtekst
KY · Gjelder fra 2026-01-01
Kentucky KCDPA
Ky. Rev. Stat. §§ 367.3611 to 367.3639
100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
MD · Gjelder fra 2025-10-01
Maryland MODPA
Md. Code, Com. Law § 14-4601 et seq.
35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
MN · Gjelder fra 2025-07-31
Minnesota MCDPA
Minn. Stat. § 325O.01 et seq.
100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
MT · Gjelder fra 2024-10-01
Montana MTCDPA
Mont. Code § 30-14-2801 et seq.
50,000 consumers, or 25,000 consumers with revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
NE · Gjelder fra 2025-01-01
Nebraska NDPA
Neb. Rev. Stat. § 87-1101 et seq.
No consumer number threshold. Applies to entities that are not small businesses under the SBA definition.
Retting: Ja
Offisiell lovtekst
NH · Gjelder fra 2025-01-01
New Hampshire Privacy Act
N.H. Rev. Stat. ch. 507-H
35,000 consumers, or 10,000 consumers with more than a quarter of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
NJ · Gjelder fra 2025-01-15
New Jersey NJDPA
N.J.S.A. 56:8-166.4 et seq.
100,000 consumers, or 25,000 consumers where the controller receives any benefit from the sale of personal data.
Retting: Ja
Offisiell lovtekst
OR · Gjelder fra 2024-07-01
Oregon OCPA
Or. Rev. Stat. §§ 646A.570 to 646A.589
100,000 consumers, or 25,000 consumers with more than a quarter of annual revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
RI · Gjelder fra 2026-01-01
Rhode Island DTPPA
R.I. Gen. Laws ch. 6-48.1
35,000 customers, or 10,000 customers with more than a fifth of gross revenue from the sale of personal data.
Retting: Ja
Offisiell lovtekst
TN · Gjelder fra 2025-07-01
Tennessee TIPA
Tenn. Code § 47-18-3201 et seq.
Revenue above 25,000,000 dollars together with a consumer volume threshold.
Retting: Ja
Offisiell lovtekst
TX · Gjelder fra 2024-07-01
Texas TDPSA
Tex. Bus. & Com. Code ch. 541
No consumer number threshold. Applies to any entity doing business in Texas that is not a small business under the SBA definition.
Retting: Ja
Offisiell lovtekst
UT · Gjelder fra 2023-12-31
Utah UCPA
Utah Code §§ 13-61-101 to 13-61-404
Annual revenue of 25,000,000 dollars or more, together with a consumer volume threshold.
Retting: Står ikke
Offisiell lovtekst
VA · Gjelder fra 2023-01-01
Virginia CDPA
Va. Code §§ 59.1-575 to 59.1-585
100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.
Retting: Står ikke
Offisiell lovtekst

Biometri, helsedata og AI

Ved siden av de heldekkende lovene står særlige regler som driver mest tvist og tilsyn.

Illinois Biometric Information Privacy Act
740 ILCS 14 · IL · Illinois AG
Texas Capture or Use of Biometric Identifier Act
Tex. Bus. & Com. Code § 503.001 · TX · Texas AG
Washington My Health My Data Act
RCW 19.373 · WA · Washington AG
California Delete Act, registrering av datameglere og sletting
Cal. Civ. Code § 1798.99.80 et seq. · CA · CPPA
Colorado Artificial Intelligence Act, forbrukervern ved AI med høy risiko
Colo. Rev. Stat. § 6-1-1701 et seq. · CO · Colorado AG
Utah Artificial Intelligence Policy Act
Utah Code § 13-72 · UT · Utah DCP
Illinois Human Rights Act, kunstig intelligens i ansettelsesbeslutninger
775 ILCS 5/2-102 · IL · Illinois IDHR
New York SHIELD Act, datasikkerhet og varsling om brudd
N.Y. Gen. Bus. Law §§ 899-aa and 899-bb · NY · New York AG
Massachusetts standarder for beskyttelse av personopplysninger
201 CMR 17.00 · MA · Massachusetts OCABR

Tabellen gjengir det utgiveren skriver. Den er ingen vurdering av om en bestemt virksomhet omfattes, og den er ikke juridisk rådgivning.

Til de amerikanske reglene

Kontrollerbare tillitssignaler

Seks faste blokker, én kilde per linje
Ingen setning skrevet av en språkmodell
Motorversjon og lesedato på hvert svar
Ingen kundedata, ingen dokumenter, ingen rådgivning
Modellkort og revisjon publisert etter AI-forordningen

Modellkort Revisjon