Generate your Privacy Policy for free, Get started now →
At least 750 data brokers were registered in one or more US state registries, according to a Privacy Rights Clearinghouse and EFF analysis published June 2025. See the count by state, the hundreds of companies missing from each state's own list, and why Connecticut and New Jersey still have no working registry.
Read article
Texas's $1.4 billion settlement with Meta, announced in July 2024 by Attorney General Ken Paxton, is the largest privacy settlement any single state has ever obtained. See how the four states, and two cities, with dedicated biometric privacy laws compare heading into 2026.
Read article
81% of Americans wrongly believe HIPAA protects the health data collected by fitness, period-tracking, and mental health apps, according to a 2023 Harris Poll conducted for ClearDATA. See which three states, plus one federal rule, actually cover that gap in 2026.
Read article
Only 1 of the 20 comprehensive US state privacy laws, California's CCPA, gives consumers any right to sue directly, and even that is limited to data breaches. See how every state's private right of action and cure period compares as of 2026.
Read article
Florida's Attorney General logged 1,496 consumer complaints under the Florida Digital Bill of Rights in 2025, per the office's February 2026 enforcement report. See the revenue threshold that limits its scope, the penalty structure, and why zero dollars in fines have been collected since it took effect.
Read article
Virginia Governor Abigail Spanberger signed S.B. 338 on April 13, 2026, amending the VCDPA to prohibit selling precise geolocation data outright, effective July 1, 2026, and making Virginia the third state after Maryland and Oregon to ban the practice rather than just require an opt-out.
Read article
New Jersey's Division of Consumer Affairs announced on July 10, 2026 that it will not enforce the state's new data broker registration fees, which run as high as $1.5 million a year, until June 2027.
Read article
Maryland's HB 711 takes effect July 1, 2026, barring controllers from knowingly selling personal data to any government unit that has supported civil immigration enforcement in the prior six months.
Read article