Delstatlig integritetsrätt i USA, lag för lag

Nitton delstater har en heltäckande integritetslag. Tabellen visar tillämpningsdatum, tröskeln så som lagtexten skriver den och om texten ger en rätt till rättelse. Varje rad länkar till lagtexten hos delstatens egen utgivare.

Läst mot källa 2026-08-22 · 19

Delstat	Lag	Tillämpas	Tröskel i texten	Rättelse	Lagtext
CO	Colorado Privacy Act Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313	2023-07-01	100,000 consumers, or 25,000 consumers with revenue or a discount from the sale of personal data.	Ja	leg.colorado.gov
CT	Connecticut CTDPA Conn. Gen. Stat. §§ 42-515 to 42-525	2023-07-01	100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.	Ja	www.cga.ct.gov
DE	Delaware DPDPA Del. Code tit. 6, ch. 12D	2025-01-01	35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.	Ja	delcode.delaware.gov
FL	Florida Digital Bill of Rights Fla. Stat. § 501.701 et seq.	2024-07-01	Global gross revenue above 1,000,000,000 dollars together with one of the stated business criteria.	Ja	www.flsenate.gov
IN	Indiana CDPA Ind. Code § 24-15	2026-01-01	100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.	Ja	iga.in.gov
IA	Iowa ICDPA Iowa Code ch. 715D	2025-01-01	100,000 consumers, or 25,000 consumers with revenue from the sale of personal data.	Står inte	www.legis.iowa.gov
KY	Kentucky KCDPA Ky. Rev. Stat. §§ 367.3611 to 367.3639	2026-01-01	100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.	Ja	apps.legislature.ky.gov
MD	Maryland MODPA Md. Code, Com. Law § 14-4601 et seq.	2025-10-01	35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.	Ja	mgaleg.maryland.gov
MN	Minnesota MCDPA Minn. Stat. § 325O.01 et seq.	2025-07-31	100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.	Ja	www.revisor.mn.gov
MT	Montana MTCDPA Mont. Code § 30-14-2801 et seq.	2024-10-01	50,000 consumers, or 25,000 consumers with revenue from the sale of personal data.	Ja	archive.legmt.gov
NE	Nebraska NDPA Neb. Rev. Stat. § 87-1101 et seq.	2025-01-01	No consumer number threshold. Applies to entities that are not small businesses under the SBA definition.	Ja	nebraskalegislature.gov
NH	New Hampshire Privacy Act N.H. Rev. Stat. ch. 507-H	2025-01-01	35,000 consumers, or 10,000 consumers with more than a quarter of gross revenue from the sale of personal data.	Ja	www.gencourt.state.nh.us
NJ	New Jersey NJDPA N.J.S.A. 56:8-166.4 et seq.	2025-01-15	100,000 consumers, or 25,000 consumers where the controller receives any benefit from the sale of personal data.	Ja	pub.njleg.state.nj.us
OR	Oregon OCPA Or. Rev. Stat. §§ 646A.570 to 646A.589	2024-07-01	100,000 consumers, or 25,000 consumers with more than a quarter of annual revenue from the sale of personal data.	Ja	www.oregonlegislature.gov
RI	Rhode Island DTPPA R.I. Gen. Laws ch. 6-48.1	2026-01-01	35,000 customers, or 10,000 customers with more than a fifth of gross revenue from the sale of personal data.	Ja	webserver.rilegislature.gov
TN	Tennessee TIPA Tenn. Code § 47-18-3201 et seq.	2025-07-01	Revenue above 25,000,000 dollars together with a consumer volume threshold.	Ja	www.capitol.tn.gov
TX	Texas TDPSA Tex. Bus. & Com. Code ch. 541	2024-07-01	No consumer number threshold. Applies to any entity doing business in Texas that is not a small business under the SBA definition.	Ja	statutes.capitol.texas.gov
UT	Utah UCPA Utah Code §§ 13-61-101 to 13-61-404	2023-12-31	Annual revenue of 25,000,000 dollars or more, together with a consumer volume threshold.	Står inte	le.utah.gov
VA	Virginia CDPA Va. Code §§ 59.1-575 to 59.1-585	2023-01-01	100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.	Står inte	law.lis.virginia.gov

CO · Tillämpas 2023-07-01
Colorado Privacy Act
Colo. Rev. Stat. §§ 6-1-1301 to 6-1-1313
100,000 consumers, or 25,000 consumers with revenue or a discount from the sale of personal data.
Rättelse: Ja
Officiell lagtext
CT · Tillämpas 2023-07-01
Connecticut CTDPA
Conn. Gen. Stat. §§ 42-515 to 42-525
100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
DE · Tillämpas 2025-01-01
Delaware DPDPA
Del. Code tit. 6, ch. 12D
35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
FL · Tillämpas 2024-07-01
Florida Digital Bill of Rights
Fla. Stat. § 501.701 et seq.
Global gross revenue above 1,000,000,000 dollars together with one of the stated business criteria.
Rättelse: Ja
Officiell lagtext
IN · Tillämpas 2026-01-01
Indiana CDPA
Ind. Code § 24-15
100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
IA · Tillämpas 2025-01-01
Iowa ICDPA
Iowa Code ch. 715D
100,000 consumers, or 25,000 consumers with revenue from the sale of personal data.
Rättelse: Står inte
Officiell lagtext
KY · Tillämpas 2026-01-01
Kentucky KCDPA
Ky. Rev. Stat. §§ 367.3611 to 367.3639
100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
MD · Tillämpas 2025-10-01
Maryland MODPA
Md. Code, Com. Law § 14-4601 et seq.
35,000 consumers, or 10,000 consumers with more than a fifth of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
MN · Tillämpas 2025-07-31
Minnesota MCDPA
Minn. Stat. § 325O.01 et seq.
100,000 consumers, or 25,000 consumers with more than a quarter of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
MT · Tillämpas 2024-10-01
Montana MTCDPA
Mont. Code § 30-14-2801 et seq.
50,000 consumers, or 25,000 consumers with revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
NE · Tillämpas 2025-01-01
Nebraska NDPA
Neb. Rev. Stat. § 87-1101 et seq.
No consumer number threshold. Applies to entities that are not small businesses under the SBA definition.
Rättelse: Ja
Officiell lagtext
NH · Tillämpas 2025-01-01
New Hampshire Privacy Act
N.H. Rev. Stat. ch. 507-H
35,000 consumers, or 10,000 consumers with more than a quarter of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
NJ · Tillämpas 2025-01-15
New Jersey NJDPA
N.J.S.A. 56:8-166.4 et seq.
100,000 consumers, or 25,000 consumers where the controller receives any benefit from the sale of personal data.
Rättelse: Ja
Officiell lagtext
OR · Tillämpas 2024-07-01
Oregon OCPA
Or. Rev. Stat. §§ 646A.570 to 646A.589
100,000 consumers, or 25,000 consumers with more than a quarter of annual revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
RI · Tillämpas 2026-01-01
Rhode Island DTPPA
R.I. Gen. Laws ch. 6-48.1
35,000 customers, or 10,000 customers with more than a fifth of gross revenue from the sale of personal data.
Rättelse: Ja
Officiell lagtext
TN · Tillämpas 2025-07-01
Tennessee TIPA
Tenn. Code § 47-18-3201 et seq.
Revenue above 25,000,000 dollars together with a consumer volume threshold.
Rättelse: Ja
Officiell lagtext
TX · Tillämpas 2024-07-01
Texas TDPSA
Tex. Bus. & Com. Code ch. 541
No consumer number threshold. Applies to any entity doing business in Texas that is not a small business under the SBA definition.
Rättelse: Ja
Officiell lagtext
UT · Tillämpas 2023-12-31
Utah UCPA
Utah Code §§ 13-61-101 to 13-61-404
Annual revenue of 25,000,000 dollars or more, together with a consumer volume threshold.
Rättelse: Står inte
Officiell lagtext
VA · Tillämpas 2023-01-01
Virginia CDPA
Va. Code §§ 59.1-575 to 59.1-585
100,000 consumers, or 25,000 consumers with more than half of gross revenue from the sale of personal data.
Rättelse: Står inte
Officiell lagtext

Biometri, hälsodata och AI

Vid sidan av de heltäckande lagarna finns särskilda regler som ofta driver tvist och tillsyn.

Illinois Biometric Information Privacy Act
740 ILCS 14 · IL · Illinois AG
Texas Capture or Use of Biometric Identifier Act
Tex. Bus. & Com. Code § 503.001 · TX · Texas AG
Washington My Health My Data Act
RCW 19.373 · WA · Washington AG
California Delete Act, registrering av datamäklare och radering
Cal. Civ. Code § 1798.99.80 et seq. · CA · CPPA
Colorado Artificial Intelligence Act, konsumentskydd vid AI med hög risk
Colo. Rev. Stat. § 6-1-1701 et seq. · CO · Colorado AG
Utah Artificial Intelligence Policy Act
Utah Code § 13-72 · UT · Utah DCP
Illinois Human Rights Act, artificiell intelligens i anställningsbeslut
775 ILCS 5/2-102 · IL · Illinois IDHR
New York SHIELD Act, datasäkerhet och anmälan av intrång
N.Y. Gen. Bus. Law §§ 899-aa and 899-bb · NY · New York AG
Massachusetts standarder för skydd av personuppgifter
201 CMR 17.00 · MA · Massachusetts OCABR

Tabellen återger vad utgivaren skriver. Den är inte en bedömning av om en viss verksamhet omfattas, och den är inte juridisk rådgivning.

Till de amerikanska reglerna

Kontrollerbara förtroendesignaler

Sex fasta block, en källa per rad
Ingen mening skriven av en språkmodell
Motorversion och läsdatum på varje svar
Ingen kunddata, inga dokument, ingen rådgivning
Modellkort och revision publicerade enligt AI-akten

Modellkort Revision