The welcome trend toward laws regulating online consumer privacy continues into 2024 with new laws being proposed, and those already passed taking effect. Here is a brief rundown of what to expect as we enter the New Year.
States With New Privacy Laws
California
The state that set the standard for online privacy protection continues to bolster existing statutes with new restrictions.
January 1 started the clock ticking on the requirement for data brokers to register with the California Privacy Protection Agency (CPPA) instead of the California Attorney General’s Office. The Delete Act, passed last year, compels them to register by the end of January. By July 1, data brokers must collect and report information in their privacy policy regarding certain types of California Consumer Privacy Act (CCPA) requests that they have received.
Colorado
This is the year that the Colorado Privacy Act goes into effect. Beginning on July 1, organizations that fall within the CPA’s application thresholds must allow consumers to opt-out of the sale of their personal data or use of their personal data for targeted advertising, using a Universal Opt-Out Mechanism (UOOM). More information about the UDOM can be found here.
Connecticut
Connecticut was the first state to approve a Children’s Privacy Law that offers additional privacy protections for children 13 to 17 years of age. It will take effect in October of this year.
Montana
The Montana Consumer Data Privacy Act goes into effect on October 1. As with other privacy laws it provides a universal opt-out mechanism, as well as additional privacy rights for children.
Oregon
Data brokers in Oregon must register with the state’s Department of Consumer and Business services as of January 1. And thanks to the Oregon Consumer Privacy Act, residents can now obtain a list of specific third parties, other than natural persons, to which their personal data has been disclosed.
Texas
The Texas Data Privacy and Security Act takes effect on July 1 of this year. It is similar to laws passed in other states but is primarily modeled after the Virginia version.
If you don’t see your state listed here, there may still be statutes in place to protect your online privacy. Visit our Privacy Laws by State page to find out more. And even where a specific law does not yet exist, IronWall360 has been able to work with data brokers and other entities to protect our clients by removing their home address and other personal information.
