State data privacy laws, which are far from uniform, are on the rise. To address that, as well the public’s increasing concern with protecting their private information, it is expected that there will be a serious effort in Congress this year to enact federal data privacy legislation. Here is what you need to know to ensure your business is ready for potential federal regulation.

Applicable State Laws

As is widely known, some states have recently enacted data privacy legislation to protect consumers. For example, in early 2020, California’s new privacy law, the California Consumer Privacy Act (CCPA), took effect, giving consumers more discretion regarding over how companies share and use their personal information. (For years, California already had in place its Database Security Breach Notification Act.) More recently, California enacted the California Privacy Rights and Enforcement Act (CPRA), which amends and strengthens the CCPA. Other states, such as Maine, Nevada, New York, Oregon, and Washington, have enacted their own data privacy legislation.