Privacy Law by State

California

California has the strongest consumer privacy law in the U.S. The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give residents extensive rights over their personal data.

Key Privacy Rights:

• Right to know what data is collected
• Right to delete personal information
• Right to opt-out of data sales
• Right to data portability
• Right to non-discrimination

Illinois

Illinois has the nation's strictest biometric privacy law. The Biometric Information Privacy Act (BIPA) protects fingerprints, facial scans, and other biometric data.

BIPA Protections:

• Written consent required for biometric collection
• Disclosure of data retention policies
• Private right of action
• Significant statutory damages

Virginia

The Virginia Consumer Data Protection Act (VCDPA) provides comprehensive data protection rights similar to GDPR and CCPA.

Key Features:

• Consumer data access rights
• Correction and deletion rights
• Opt-out of targeted advertising
• Data protection assessments

Colorado

The Colorado Privacy Act (CPA) gives consumers control over their personal data and requires businesses to honor privacy rights.

Consumer Rights:

• Access to personal data
• Correction of inaccuracies
• Data deletion
• Opt-out of profiling

Connecticut

Connecticut's data privacy law provides strong consumer protections and business obligations for data handling.

Utah

The Utah Consumer Privacy Act balances consumer rights with business flexibility.