CCIA Report Highlights Expanding State Privacy Regulations and Regulatory Fragmentation in the U.S.
The Computer & Communications Industry Association (CCIA) has released its 2026 State Privacy Landscape Report, revealing a significant expansion of state-level consumer privacy laws across the U.S. In 2026 alone, four new states—Oklahoma, Alabama, Louisiana, and Vermont—enacted comprehensive consumer privacy laws, bringing the total to twenty-three states with such legislation. Additionally, states like Connecticut, Delaware, Maryland, and New Hampshire amended existing privacy frameworks to include new requirements concerning data brokers, sensitive information, consumer protections, and third-party data sharing. California continues to be a leading jurisdiction, actively implementing new regulations and expanding its oversight of consumer data practices. States are also increasingly targeting specific technologies and data practices, including artificial intelligence, children’s privacy, age verification, precise geolocation, data brokers, and automated decision-making.
