The legal landscape surrounding data protection in the United States has undergone significant changes over the past couple of years. While various attempts to legislate a comprehensive federal privacy law have not succeeded, more and more US states have moved forward with adopting their own comprehensive privacy laws. To date, 19 states have enacted comprehensive general privacy laws (In addition, the Vermont Data Privacy Act, originally scheduled to take effect in July 2025, has been vetoed in its current form by the governor and will not come into force as intended). 5 of these laws (in Iowa, Delaware, New Jersey, New Hampshire and Nebraska) are about to enter into force in January 2025.

The various laws share significant similarities in their key concepts and principles. However, they vary in the particular rights granted to data subjects and their scope. Recognizing the challenges that this fragmented landscape presents, we are pleased to publish the 4^th edition of our comparative guide, which simplifies the differences between the various US states’ privacy laws in relation to data subject (consumer) rights and a couple of additional key requirements.

To read our guide >> click here

If you require further clarification or guidance on the contents of this guide, or any other data protection matters, please don’t hesitate to contact us. Our team is constantly monitoring the developments in this area, and we will keep updating this comparative guide as new laws and changes to existing ones occur.

The Technology Regulation Department

Herzog Fox & Neeman