A growing number of states have enacted comprehensive privacy statutes granting access, deletion, correction, and opt-out rights. Most lack private rights of action and are enforced by state attorneys general.
Obligations and thresholds vary substantially.
Alternative Names:
State Privacy Law|Comprehensive Privacy Statute
Why it Matters?
The absence of private rights of action in most state comprehensive laws limits litigation exposure to regulatory enforcement, which is a meaningful distinction from California and from the sectoral statutes generating class actions. Compliance obligations nonetheless create discovery exposure in other litigation, since privacy practices documentation becomes available. Threshold variation means an organization covered in one state may fall outside another's scope entirely.
Frequently Confused with
Related terms
Frequently asked questions
Do these laws create litigation exposure?
What indirect exposure exists?
