Data Privacy Laws
What Is MHMDA? WA My Health My Data Act
Washington's My Health My Data Act (ch. 19.373 RCW) took effect in 2024, has no size threshold, bans health-facility geofencing, and allows private lawsuits.
8 min read
All Articles
Browse our full library of legal guides, state law breakdowns, and practical legal information.
14754 articles
Browse by Category →
Data Privacy Laws
FDBR Compliance Checklist: Florida Data Privacy
FDBR compliance under Fla. Stat. 501.701 et seq.: the $1B controller test, privacy notice, opt-in sensitive data, opt-outs, and $50,000 penalties.
7 min read
Data Privacy Laws
FDBR Consumer Rights: Florida Data Privacy Rights
Florida Digital Bill of Rights (Fla. Stat. 501.705): access, delete, port, opt out of sale, and opt out of voice and facial recognition collection.
6 min read
Data Privacy Laws
What Is the FDBR? Florida Digital Bill of Rights
The FDBR (Fla. Stat. 501.701 et seq.) took effect July 1, 2024, with the narrowest controller test in the US: over $1B revenue plus a big-tech prong.
6 min read
Data Privacy Laws
RIDTPPA Compliance Checklist for Rhode Island
RIDTPPA (R.I. Gen. Laws 6-48.1) compliance: coverage at 35,000 customers, the 6-48.1-3 third-party disclosure, opt-in sensitive data, and AG-only enforcement.
7 min read
Data Privacy Laws
RIDTPPA Consumer Rights in Rhode Island Explained
Rhode Island's RIDTPPA (6-48.1-5) gives access, correction, deletion, portability, and opt-out rights; controllers must answer within 45 days. AG enforces.
7 min read
Data Privacy Laws
What Is the RIDTPPA? Rhode Island Data Privacy Act
The RIDTPPA (R.I. Gen. Laws 6-48.1) takes effect Jan 1, 2026, with a 35,000-customer threshold, opt-in sensitive data, and a unique third-party disclosure duty.
7 min read
Data Privacy Laws
KCDPA Compliance Checklist: Kentucky Privacy Law
KCDPA compliance (KRS 367.3611 to 367.3629): coverage, privacy notice, opt-in sensitive data, 45-day requests, assessments, processor contracts, 30-day cure.
6 min read
Data Privacy Laws
KCDPA Consumer Rights: Kentucky Privacy Rights Guide
Under the KCDPA (KRS 367.3615), Kentuckians can access, correct, delete, port, and opt out of data sales; controllers must respond within 45 days.
6 min read
Data Privacy Laws
What Is the KCDPA? Kentucky Consumer Data Privacy
The KCDPA (KRS 367.3611 to 367.3629) takes effect January 1, 2026, a close clone of Virginia's law with a 100,000-consumer threshold and opt-in sensitive data.
6 min read
Data Privacy Laws
INCDPA Compliance Checklist for Indiana Businesses
An INCDPA compliance checklist: IC 24-15 thresholds, privacy notice, opt-in sensitive data, 45-day requests, assessments, and the permanent 30-day cure before Jan. 1, 2026.
7 min read
Data Privacy Laws
INCDPA Consumer Rights: Indiana Data Privacy Rights
Indiana's INCDPA (IC 24-15-3-1) gives residents access, correction, deletion, portability, and opt-out rights starting Jan. 1, 2026, with a 45-day response window.
7 min read