Comprehensive Privacy Bills
Comprehensive privacy laws set baseline rules for how personal data is collected, processed and protected. In the absence of comprehensive U.S. federal privacy legislation, California, Colorado, Virginia, and a number of other U.S. states have passed their own consumer privacy legislation. This page tracks key legislative proposals, compares state and federal approaches, and outlines core compliance obligations for businesses operating in the U.S. and abroad. More states are considering bills broadly covering many industries this year (see map).
Search Primer
Multi-word term: Place inside quotes to ensure an exact match together (e.g. "China import").
Term list: Separate terms with spaces, not commas or semicolons to find either word (e.g. AD/CVD antidumping).
Acronyms: Use all capital letters (e.g., ACE).
Required term: If a term must be included in any resulting articles, prefix it with a plus sign (e.g., CBP +releases).
Excluded term: If a term should be excluded from any articles being found, prefix it with a minus sign (e.g., -ruling).
Singular form: Use the singular form when doing multi-word terms (e.g. "russian export control" instead of "russian export controls").
Shortest word form: When you have different word forms in a quoted term, include the shortest version if it is the last part of the expression (e.g., "entity list" instead of "entity listing" or "entity listed").