https://iapp.org/resources/article/us-state-privacy-legislation-tracker/ * language English (EN) * Francais * Espanol * Deutsch * Portugues (Brasil) * About the IAPP * Enterprise Services * Contact * Calendar * MyIAPP * search [iapp_logo] * News * Connect * Train * Certify * Resources * Conferences * Join * Store Store * shopping_cart {[ getCartTotalItems() ]} * Main Menuclose [ ] search close * Back to the Resources Menutouch_app * Shopping Cart shopping_cart {[ getCartTotalItems() ]} * + English (EN)language o radio_button_checkedEnglish o radio_button_uncheckedFrancais o radio_button_uncheckedEspanol o radio_button_uncheckedDeutsch o radio_button_uncheckedPortugues (Brasil) * Homehome * News * Connectgroup * Trainschool * Certify * Resourcesassessment * Conferencesevent * Joinperson_add * Storestore * MyIAPPperson_outline * About the IAPPinfo_outline * Enterprise Servicesdomain * Contactsend * Calendarcalendar_today * Resources Menuclose [ ] search close * Open the Main Menutouch_app * Shopping Cart shopping_cart {[ getCartTotalItems() ]} * radio_button_unchecked Overview * radio_button_unchecked Research * radio_button_unchecked Tools and Trackers * radio_button_unchecked Glossary * radio_button_unchecked Global Privacy Directory * radio_button_unchecked Enforcement Database * radio_button_unchecked Westin Research Center * radio_button_unchecked Web Conferences * radio_button_unchecked Career Central * radio_button_unchecked Privacy Vendor Marketplace menu shopping_cart {[ getCartTotalItems() ]} person_outline Login close News Stream Books Videos Web Conferences Subscriptions Advertise About IAPP Publications Daily Dashboard Daily Dashboard The day's top stories from around the world Privacy Perspectives Privacy Perspectives Where the real conversations in privacy happen The Privacy Advisor The Privacy Advisor Original reporting and feature articles on the latest privacy developments Privacy Tracker Privacy Tracker Alerts and legal analysis of legislative trends Privacy Tech Privacy Tech Exploring the technology of privacy Canada Dashboard Digest Canada Dashboard Digest A roundup of the top Canadian privacy news Europe Data Protection Digest Europe Data Protection Digest A roundup of the top European data protection news Asia-Pacific Dashboard Digest Asia-Pacific Dashboard Digest A roundup of the top privacy news from the Asia-Pacific region Latin America Dashboard Digest Latin America Dashboard Digest A roundup of the top privacy news from Latin America U.S. Privacy Digest U.S. Privacy Digest A roundup of US privacy news Overview KnowledgeNet Chapters Sections Affinity Groups Volunteer Annual Awards Member Directory Privacy List Career Central Find a KnowledgeNet Chapter Near You Talk privacy and network with local members at IAPP KnowledgeNet Chapter meetings, taking place worldwide. Virtual Networking Connect with IAPP members around the globe without ever leaving your home. Find a Virtual Networking event today. Join the Privacy List Have ideas? Need advice? Subscribe to the Privacy List. It's crowdsourcing, with an exceptional crowd. IAPP Job Board Looking for a new challenge, or need to hire your next privacy pro? The IAPP Job Board is the answer. Member Directory Locate and network with fellow privacy professionals using this peer-to-peer directory. IAPP Calendar Review a filterable list of conferences, KnowledgeNets, LinkedIn Live broadcasts, networking events, web conferences and more. Overview Online Training Live Online Training In-Person Training Books Sample Questions Train Your Staff Official Training Partners Web Conferences European Data Protection (CIPP/E) Understand Europe's framework of laws, regulations and policies, most significantly the GDPR. U.S. Private-Sector Privacy (CIPP/US) Steer a course through the interconnected web of federal and state laws governing U.S. data privacy. Canadian Privacy (CIPP/C) Learn the intricacies of Canada's distinctive federal/provincial/ territorial data privacy governance systems. Privacy Program Management (CIPM) Develop the skills to design, build and operate a comprehensive data protection program. Privacy in Technology (CIPT) Add to your tech knowledge with deep training in privacy-enhancing technologies and how to deploy them. CCPA Training Gain the knowledge needed to address the widest-reaching consumer information privacy law in the U.S. GDPR Training Learn the legal, operational and compliance requirements of the EU regulation and its global influence. Privacy Law Specialist Training (PLS) Meet the stringent requirements to earn this American Bar Association-certified designation. Overview Certification Programs Get Certified How to Prepare Continuing Privacy Education (CPE) Fees Certify Your Staff Verify a Certification CIPP Certification CIPP Certification The global standard for the go-to person for privacy laws, regulations and frameworks CIPM Certification CIPM Certification The first and only privacy certification for professionals who manage day-to-day operations CIPT Certification CIPT Certification As technology professionals take on greater privacy responsibilities, our updated certification is keeping pace with 50% new content covering the latest developments. FIP Designation FIP Designation Recognizing the advanced knowledge and issue-spotting skills a privacy pro must attain in today's complex world of data privacy. Privacy Law Specialist Privacy Law Specialist The first title to verify you meet stringent requirements for knowledge, skill, proficiency and ethics in privacy law, and one of the ABA's newest accredited specialties. CIPP/E + CIPM = GDPR Ready CIPP/E + CIPM = GDPR Ready The IAPP'S CIPP/E and CIPM are the ANSI/ISO-accredited, industry-recognized combination for GDPR readiness. Learn more today. Certificacao CDPO/BR Certificacao CDPO/BR Mostre seus conhecimentos na gestao do programa de privacidade e na legislacao brasileira sobre privacidade. Certification CDPO/FR Certification CDPO/FR Certification des competences du DPO fondee sur la legislation et reglementation francaise et europeenne, agreee par la CNIL. Tools and Trackers Research Glossary Global Privacy Directory Enforcement Database Westin Research Center Web Conferences Jobs Privacy Vendor Marketplace Privacy Vendor Marketplace Privacy Vendor Marketplace Use the Vendor Demo Center, Privacy Vendor List and Privacy Tech Vendor Report to easily identify privacy products and services to support your work. International Data Transfers On this topic page, you can find the IAPP's collection of coverage, analysis and resources related to international data transfers. US State Privacy Legislation Tracker The IAPP's US State Privacy Legislation Tracker consists of proposed and enacted comprehensive state privacy bills from across the U.S. US Federal Privacy Legislation Tracker The IAPP's US Federal Privacy Legislation Tracker compiles a list of privacy-related bills proposed in Congress to keep our members informed about developments within the fe Reports and Surveys Access all reports and surveys published by the IAPP. White Papers Access all white papers published by the IAPP. CCPA and CPRA IAPP members can get up-to-date information here on the California Consumer Privacy Act and the California Privacy Rights Act. EU General Data Protection Regulation The IAPP's EU General Data Protection Regulation page collects the guidance, analysis, tools and resources you need to make sure you're meeting your obligations. Global Privacy Law Mapping Chart This chart maps several comprehensive data protection laws to assist our members in understanding how data protection is being approached around the world. GDPR Genius This interactive tool provides IAPP members access to critical GDPR resources -- all in one location. Data Protection Intensive: France Data Protection Intensive: France Concentrated learning, sharing, and networking with all sessions delivered in parallel tracks -- one in French, the other in English. Data Protection Intensive: UK Data Protection Intensive: UK DPI: UK returns in-person in March 2022. Register today to network, explore U.K.-oriented issues, and more. Global Privacy Summit Global Privacy Summit The world's top privacy conference. Whether you work in the public or private sector, anywhere in the world, the Summit is your can't-miss event. Canada Privacy Symposium Canada Privacy Symposium Find answers to your privacy questions from keynote speakers and panellists who are experts in Canadian data protection. Asia Privacy Forum Asia Privacy Forum Join top experts discussing the critical privacy issues impacting Asian businesses today. Privacy. Security. Risk. (P.S.R.) Privacy. Security. Risk. (P.S.R.) P.S.R. offers the best of the best in privacy and security, with innovative cross-education and stellar networking. ANZ Summit Online ANZ Summit Online Delivering world-class discussion and education on the top privacy issues in Australia, New Zealand and around the globe. Europe Data Protection Congress Europe Data Protection Congress The hub of European privacy policy debate, thought leadership and strategic thinking with data protection professionals. Speak at an IAPP Event View our open calls and submission instructions. Sponsor an Event Increase visibility for your organization--check out sponsorship opportunities today. Individual Membership Corporate Membership Group Membership Student Membership Become a Member Start taking advantage of the many IAPP member benefits today Corporate Members See our list of high-profile corporate members--and find out why you should become one, too Renew Your Membership Don't miss out for a minute--continue accessing your benefits ANZ Members Review current member benefits available to Australia and New Zealand members {[ product.name ]} clear mode_editEdit remove_circle_outline {[ getCartItemQuantity(product.id) ]} add_circle_outline {[ product.price | currencyFilter ]} TOTAL: {[ getCartTotalCost() | currencyFilter ]} Update cart for total shopping_basket Checkout autorenew UPDATE CART ResourceCenter All the privacy tools and information you need in one easy-to-find place * Overview * Research * Tools and Trackers * Glossary * Global Privacy Directory * Enforcement Database * Westin Research Center * Web Conferences * Career Central * Privacy Vendor Marketplace Introduction to Resource Center This page provides an overview of the IAPP's Resource Center offerings. Learn More Contact Resource Center For any Resource Center related inquiries, please reach out to resourcecenter@iapp.org. Contact Now [IAPP_digit] queue Save This US State Privacy Legislation Tracker Taylor Kay Lively Taylor Kay Lively Image Last Updated: March 10, 2022 View Comparison Chart View Comparison Map State-level momentum for comprehensive privacy bills is at an all-time high. After the California Consumer Privacy Act passed in 2018, multiple states proposed similar legislation to protect consumers in their states. The IAPP Westin Research Center compiled the below list of proposed and enacted comprehensive privacy bills from across the country to aid our members' efforts to stay abreast of the changing state-privacy landscape. The IAPP Resource Center hosts a "US State Privacy" topic page, which provides a curated collection of news and resources covering US state privacy, as well as the US Federal Privacy Legislation Tracker, which includes a list of privacy-related bills proposed in Congress to keep our members informed about developments within the federal privacy landscape. --------------------------------------------------------------------- Screen Shot 2017-04-14 at 3.02.11 PM Although many of the bills included in the table will fail to become law, comparing the key provisions in each bill can be helpful in understanding how privacy is developing in the United States. Bills that are voted down or die in committee will not be immediately removed because their inclusion helps illustrate how states are thinking about privacy. We identified 13 provisions that commonly appear in comprehensive privacy statutes and placed an "x" in the corresponding column if a particular bill is included the provision. The 13 common privacy provisions are broken into two categories -- consumer rights and business obligations -- and are described below the table. The table includes bills intended to be comprehensive approaches to governing the use of personal information in a state -- industry-, information-specific, or narrowly scoped bills (e.g., data security bills) are not included unless they have a companion piece of legislation that collectively creates a comprehensive structure applicable to an industry central to the data-sharing economy (e.g., internet service providers or technology companies). The Westin Research Center will periodically update this table. If you are aware of a proposed state bill (with formally introduced language) that is absent from our list, please share it with The Westin Research Center, research@iapp.org. Click To View Chart (PDF) --------------------------------------------------------------------- [State_Comp_Privacy_Law_Chart1] Table Elements + Legislative Process -- Each state legislature has a unique legislative calendar and different legislative procedures; this set of columns generalizes those different legislative procedures into six categories: o Introduced -- A bill has been introduced on a legislative chamber floor but has not yet moved into committee. o In Committee -- A bill is moving through the various committees in its chamber of origin. o Crossed Chamber -- A bill has passed a vote in its chamber of origin and moved to the opposite chamber of the legislature (e.g., a state house of representatives passed a bill and it moved to the state senate). o Cross Committee -- A bill is moving through the various committees in its non-originating chamber. o Passed -- Both chambers of the legislature have passed the bill. o Signed -- The governor signed the bill and it is now law. + In Session -- List of the state legislatures that are currently in session or only on a temporary (as compared to an extended) recess. ----------------------------------------------------------------- Provisions in Chart Consumer Rights + The right of access to personal information collected or shared - The right for a consumer to access from a business/ data controller the information or categories of information collected about a consumer, the information or categories of information shared with third parties, or the specific third parties or categories of third parties to which the information was shared; or, some combination of similar information. + The right to rectification -- The right for a consumer to request that incorrect or outdated personal information be corrected but not deleted. + The right to deletion -- The right for a consumer to request deletion of personal information about the consumer under certain conditions. + The right to restriction of processing -- The right for a consumer to restrict a business's ability to process personal information about the consumer. + The right to data portability -- The right for a consumer to request personal information about the consumer be disclosed in a common file format. + The right to opt out of the sale of personal information -- The right for a consumer to opt out of the sale of personal information about the consumer to third parties. + The right against automated decision making -- A prohibition against a business making decisions about a consumer based solely on an automated process without human input. + A consumer private right of action -- The right for a consumer to seek civil damages from a business for violations of a statute. ----------------------------------------------------------------- Business Obligations + A strict opt-in for the sale of personal information of a consumer less than a certain age -- A restriction placed on a business to treat consumers under a certain age with an opt-in default for the sale of their personal information. + Notice/transparency requirements -- An obligation placed on a business to provide notice to consumers about certain data practices, privacy operations, and/or privacy programs. + Mandated risk assessment -- An obligation placed on a business to conduct formal risk assessments of privacy and/or security projects or procedures. + A prohibition on discrimination against a consumer for exercising a right -- A prohibition against a business treating a consumer who exercises a consumer right differently than a consumer who does not exercise a right. + A purpose/processing limitation -- An EU General Data Protection Regulation-style restrictive structure that prohibits the collection/processing of personal information except for a specific purpose. View Table Elements --------------------------------------------------------------------- Previous Editions Here you can find archived editions of the US State Privacy Legislation Tracker, with documents organized by year in which bills were introduced. * Bills Introduced 2021 (PDF) * Bills Introduced 2020 (PDF) * Bills Introduced 2018-2019 (PDF) --------------------------------------------------------------------- The Growth of State Privacy Legislation Here you can find infographics depicting the rapid growth of state level privacy initiatives along with a one-page chart with links to bills by year to provide historical context. Click to Access --------------------------------------------------------------------- Tags: U.S., Privacy Law, Westin Research Center Related Stories CCPA-/CPRA-Related Legislation Tracker There are bills pending in the California Legislature that would amend the CCPA and/or the CPRA or otherwise impact how organizations understand or approach each law. This tracker provides a brief summary of the proposed legislation, as well as the status and last legislative action.... Read More queue Save This The State Student Privacy Report Card The Parent Coalition for Student Privacy and the Network for Public Education published an extensive report card that analyzes and grades all the student privacy laws that have been passed in the United States in recent years. The report card has been split into an "interactive map" and a traditiona... Read More queue Save This White Paper - CCPA Compliance Operation: Delivering Data Access via Accounts (June 2019) - This white paper, authored by Baker & McKenzie Partner Lothar Determann and IAPP Westin Fellow Mitchell Noordyke, CIPP/E, CIPP/US, CIPM, outlines how businesses must develop a perspective on the definition of account as they work to operationalize their CCPA compliance programs with re... Read More queue Save This Nevada Privacy Law Compliance Guide This guide, published by Termageddon, breaks down the recent amendments to the Nevada state privacy law, and addresses the various aspects of compliance with the law, including: Who the law applies to. What are the requirements of the law. What are the penalties. What you need to do to comply ... Read More queue Save This GDPR Genius This interactive tool provides IAPP members ready access to critical GDPR resources -- enforcement precedent, interpretive guidance, expert analysis and more -- all in one location.... Read More queue Save This [0 ] [iapp_logo_] * * * * * About The IAPP is the largest and most comprehensive global information privacy community and resource. Founded in 2000, the IAPP is a not-for-profit organization that helps define, promote and improve the privacy profession globally. * What is Privacy * Corporate Members * Board of Directors * Advisory Boards * IAPP Staff * Locations Become a member The IAPP is the only place you'll find a comprehensive body of resources, knowledge and experts to help you navigate the complex landscape of today's data-driven world. We offer individual, corporate and group memberships, and all members have access to an extensive array of benefits. Sign Up Today (c) 2022 International Association of Privacy Professionals. All rights reserved. Pease International Tradeport, 75 Rochester Ave. Portsmouth, NH 03801 USA * +1 603.427.9200 * Contact Us * Press * Advertise * Privacy Notice * Cookie Notice * Conditions of Use * Refund Policy * Cookie Settings * language English (EN) * Francais * Espanol * Deutsch * Portugues (Brasil)