State privacy laws in the U.S. 2025, by business obligations
As of February 2025, 19 U.S. states had state-level data privacy laws signed. While the core content in these regulations was similar, they varied in addressing certain business obligations regarding data privacy. According to all state-level laws, businesses are obligated to notify consumers about certain data privacy operations. Furthermore, all signed laws require companies to treat consumers under a certain age with an opt-in default for the sale of their personal information.
