U.S. State Privacy Laws Expand, Creating Complex Compliance Landscape
As of August 2026, 20 U.S. states have enacted comprehensive consumer privacy laws, with Indiana, Kentucky, and Rhode Island joining this year. These laws vary in terms of consumer rights and compliance requirements, creating a complex regulatory environment for businesses operating across multiple states. The absence of a federal privacy law means companies must navigate a patchwork of state regulations, each with unique thresholds and obligations. Key elements include honoring Global Privacy Control signals and managing data subject rights requests.