US State Comprehensive Privacy Laws
Statute
United States (state, 20 in effect)
· 2018
In the absence of a federal privacy statute, twenty US states have comprehensive consumer privacy laws in effect and twenty-four have enacted one. They converge on six rights — access, deletion, correction, portability, opt-out and non-discrimination — and diverge on thresholds, cure periods, sensitive-data handling, universal opt-out signals and who enforces. The practical consequence for an API provider is that the obligation is one obligation and the compliance surface is twenty, and only a few of the differences are actually machine-visible.
Horizontal regime. It binds companies by what they do with data, software or
customers, not by the sector they sit in. The industries below are where it creates
specific, additional duties — not the limit of who has to comply.
Regions
Industries
Each links to that industry as a scored cohort — so the question "how ready is this sector for the regime that governs it?" becomes one you can actually look at.