November 5, 2024
How Long Can Businesses Keep Personal Data?
Some privacy laws require businesses to create data retention policies, but figuring out the maximum amount of time you can hold on to data can be complicated.
Data privacy has become an important issue for voters across the political spectrum. State legislatures have taken notice and are passing new privacy laws at a quick pace.
As the patchwork of state privacy legislation grows more complicated, it helps to know when these new laws actually go into effect. Here’s a quick rundown by state.
The California Privacy Rights Act (CCPA 2.0)
Takes effect on January 1, 2023
The Virginia Consumer Data Protection Act
Takes effect on January 1, 2023
The Colorado Privacy Act
Takes effect on July 1, 2023
The Connecticut Data Privacy Act
Takes effect on July 1, 2023
The Utah Consumer Privacy Act
Takes effect on December 31, 2023
Florida Digital Bill of Rights
Takes effect on July 1, 2024
The Oregon Consumer Privacy Act
Takes effect on July 1, 2024
The Texas Data Privacy and Security Act
Takes effect on July 1, 2024
The Montana Consumer Data Privacy Act
Takes effect on October 1, 2024
The Delaware Personal Data Privacy Act
Takes effect on January 1, 2025
The Iowa Consumer Data Protection Act
Takes effect on January 1, 2025
The Nebraska Data Privacy Act
Takes effect on January 1, 2025
The New Hampshire Expectation of Privacy Act
Takes effect on January 1, 2025
S332
Takes effect on January 15, 2025
The Tennessee Information Protection Act
Takes effect on July 1, 2025
The Minnesota Consumer Data Privacy Act
Takes effect on July 31, 2025
The Maryland Online Data Privacy Act
Takes effect on October 1, 2025
The Indiana Consumer Data Protection Act
Takes effect on January 1, 2026
The Kentucky Consumer Data Protection Act
Takes effect on January 1, 2026
See our state privacy law comparison chart
Disclaimer: This content is provided for general informational purposes only and does not constitute legal or other professional advice. Without limiting the foregoing, the content may not reflect recent developments in the law, may not be complete, and may not be accurate or relevant in an applicable jurisdiction. This content is not a substitute for obtaining legal advice from a qualified licensed attorney in the applicable jurisdiction. The content is general in nature and may not pertain to specific circumstances, so it should not be used to act or refrain from acting based on it without first obtaining advice from professional counsel qualified in the applicable subject matter and jurisdictions.
Get monthly updates on the latest updates on policy & the shifting privacy landscape.
Dive into a world of knowledge, trends, and industry updates on the TrueVault blog.
