Three More States to Throw the Switch on Comprehensive Privacy Rules in 2026.

by CPI

As Congress continues to tarry on comprehensive privacy legislation, three states will ring in the new year with their own consumer data privacy rules. Kentucky, Indiana and Rhode Island will join 16 other states with comprehensive consumer privacy laws in force. Other states have enacted more limited protections.

The Kentucky Consumer Data Privacy Act (KCDPA), and Indiana Consumer Data Protection Act (ICDPA) are modeled on laws in California and elsewhere in that they apply to businesses operating in their respective states that process data from at least 100,000 residents annually, or 25,000 residents if the business derives half or more of its revenue from the sale of personal information.

Read more: https://www.pymnts.com/cpi-posts/three-more-states-to-throw-the-switch-on-comprehensive-privacy-rules-in-2026/