Explore consumer rights and business requirements across enacted US privacy laws and see how Privacy Automation can help.

The current US privacy landscape is complex. Some states have fully enacted comprehensive data privacy laws while others vary in legislation maturity.

We’re here to simplify your compliance journey and support you in protecting personal data while building trust with your customers.

Explore consumer rights and business requirements across enacted US privacy laws and see how Privacy Automation can help.

Fulfilling consumer requests all starts with having an appropriate intake method for consumers to make requests to access, correct, delete, or transmit their data. Explore the chart below to see which enacted US privacy laws require these rights.

Right to access | Right to correct | Right to delete | Right to portability | |
---|---|---|---|---|

California: CPRA | X | X | X | X |

Colorado | X | X | X | X |

Connecticut | X | X | X | X |

Delaware | X | X | X | X |

Florida | X | X | X | X |

Indiana | X | X | X | X |

Iowa | X | | X | X |

Kentucky | X | X | X | X |

Maryland | X | X | X | X |

Minnesota | X | X | X | X |

Montana | X | X | X | X |

Nebraska | X | X | X | X |

New Hampshire | X | X | X | X |

New Jersey | X | X | X | X |

Oregon | X | X | X | X |

Rhode Island | X | X | X | X |

Tennessee | X | X | X | X |

Texas | X | X | X | X |

Utah | X | | X | X |

Virginia | X | X | X | X |



Processing personal rights requests can be time consuming for the business. Data Subject Request (DSR) Automation expedites the entire DSAR fulfillment process by:


Organizations that utilize the advertising ecosystem will have to pay particular attention to opt-out requests. Explore the chart below to see which enacted US privacy laws specify opt-out, right to use, and disclosure requirements.

Right to opt-out | Right to limit use and disclosure | |||
---|---|---|---|---|

Sale | Profiling | Targeted advertising | Sensitive personal information | |

California: CPRA | X | X | X | X |

Colorado | X | X | X | Opt-in required |

Connecticut | X | X | X | Opt-in required |

Delaware | X | X | X | Opt-in required |

Florida | X | X | X | Opt-in required |

Indiana | X | X | X | Opt-in required |

Iowa | X | X | ||

Kentucky | X | X | X | Opt-in required |

Maryland | X | X | X | Opt-in required |

Minnesota | X | X | X | Opt-in required |

Montana | X | X | X | Opt-in required |

Nebraska | X | X | X | Opt-in required |

New Hampshire | X | X | X | Opt-in required |

New Jersey | X | X | X | Opt-in required |

Rhode Island | X | X | X | Opt-in required |

Oregon | X | X | X | Opt-in required |

Tennessee | X | X | X | Opt-in required |

Texas | X | X | X | Opt-in required |

Utah | X | X | ||

Virginia | X | X | X | Opt-in required |



Our __Consent and Preferences__ solution operationalizes opt-outs by:


All enacted US privacy laws require notice and transparency be provided to those covered under the law. OneTrust Privacy Operations helps by enabling you to centrally manage policies across digital assets.

All enacted US privacy laws (aside from Iowa and Utah) require formal risk assessments of privacy and/or security projects or procedures. OneTrust Privacy Operations integrates with your existing business processes, giving you real-time comprehensive risk discovery and actionable insights for risk mitigation. In addition to streamlining the assessment process, our Privacy Automation solution also equips you with the tools to improve your privacy program. Privacy awareness training, third-party risk management, and privacy and security incident management are available to unify and optimize your data privacy program activities.

Webinar

Join us for a global regulatory recap, where we will explore the latest privacy regulations and key developments impacting compliance in 2024 and beyond. This webinar will offer a streamlined analysis of newly adopted privacy laws, emerging AI regulations, and the evolving cyber regulations such as the NIS2 Directive.

eBook

Discover how to manage US opt-out requirements and enhance your marketing efforts with this guide. Download now to simplify compliance and build trust.

Webinar

Join us for a webinar on the latest updates and emerging trends in global privacy regulations.

Webinar

Join DataGuidance and a panel of experts as we discuss US privacy laws the protection of minors' data.

Webinar

Rhode Island has become the 20th US State to pass a privacy law. On June 25, 2024, the Governor of Rhode Island transmitted the Data Transparency and Privacy Protection Act (RIDTPPA) without signature allowing the Act to become law. Join the webinar to learn more.

Webinar

Join us for a discussion on preparing your organization for healthcare privacy compliance that goes beyond HIPAA.

Webinar

In this webinar, OneTrust DataGuidance and expert contributors unpack the MCPA and VDPA, examining the requirements, exceptions, and practical implications of the legislations on the data controllers and processors.

Webinar

Prepare your organization for the new wave of US privacy laws.

Checklist

Download this checklist to learn what questions to ask when designing a third-party risk management program that enables privacy compliance.

Infographic

Download our infographic and compare the many US state privacy law requirements that have been enacted or will soon come into effect.

Webinar

Join OneTrust DataGuidance and expert contributors for an overview of the Kentucky Consumer Privacy Act (KCPA), Maryland's Senate Bill 0541, and the draft American Privacy Rights Act and explore how a federal bill could shape the US privacy landscape.

Infographic

View our timeline to understand the progression of current US state privacy laws and key dates.

Webinar

Join us for an interactive webinar we dive into the CPRA, which will go into force on March 29th.

Webinar

oin OneTrust DataGuidance for a webinar highlighting the key requirements within the new US laws, New Jersey Senate Bill 332 and New Hampshire Senate Bill 255.

Webinar

Join us for a webinar on Embedding Privacy by Design through PIA Automation.

Webinar

Learn how Privacy Rights Automation helps to fully automate privacy rights requests.

Webinar

Join us for a webinar as we explore the impending implementation of the Utah Privacy Law, set to take effect on December 31, 2023.

Webinar

We explore the new Oregon and Delaware privacy laws, how they differ from other US privacy laws, and what they mean for your business.

Regulation Book

Download the Utah Consumer Privacy Act law book and have the official UCPA text at your fingertips for when the law takes effect on December 31, 2023.

Blog

Get in-depth analysis on two upcoming US Privacy laws, the Oregon Consumer Privacy Act (OCPA) and the Delaware Personal Data Privacy Act (DPDPA), with OneTrust DataGuidence and a panel of experts.

Resource Kit

Download our EU-US Data Privacy Framework resource kit to better understand the new aggreement for cross-border personal data transfers and how to educate your stakeholders.

Resource Kit

Download our US privacy resource kit designed to access a range of materials to help you understand how the US privacy landscape is evolving.

Webinar

In this free webinar, our privacy experts delve into the new Colorado and Connecticut privacy laws and how they differ from other US state regulations.

Webinar

Join our expert panel where we examine upcoming privacy legislation in Indiana, Montana, Tennessee, and Florida and the key requirements of each law.

Infographic

Adapt to Google's June 2023 CMP requirements with this infographic and confidently engage your audience while staying compliant.

Webinar

Join our live webinar as OneTrust DataGuidence and privacy experts examine new privacy legislation in Indiana, Montana, Tennessee, Florida, and Texas.

eBook

Download this eBook and learn how marketers can apply consent and preference principles to build a relationship with their audience built on trust.

Regulation Book

The Colorado Privacy Act (CPA) comes into force on July 1. Get the law's official text right at your fingertips.

Webinar

The Washington My Health My Data Act was signed into law on April 27, 2023 and will be enacted the following year. Join OneTrust DataGuidance and a team of legal experts and get the knowledge you need for compliance.

Webinar

Join the Privacy experts at OneTrust for an update on the new law and learn key requirements of Iowa’s new privacy law and more.

White Paper

Download our white paper and learn how privacy teams help organizations establish and implement polices that ensure AI applications are responsible and ethical.

Blog

Learn how to navigate the new US privacy law exemptions and see how they compare.

Webinar

Join this interactive webinar to learn how OneTrust Privacy Rights Automation helps you to fully automate privacy rights requests for your organization.

Webinar

OneTrust DataGuidance’s webinar discusses Iowa’s CDPA, its similarities to other US privacy laws, its implications on organizations, and steps for compliance.

Webinar

Biometric laws are emerging, and companies must ensure compliance to avoid hefty fines. Join the OneTrust DataGuidance panel of experts to learn more.

Infographic

Businesses at different stages of privacy maturity will need to approach US privacy compliance in different ways. Download the infographic to learn more.

Webinar

Join this US Privacy Demo Series webinar to see a live demo of the OneTrust privacy risk or data protection assessments (PIA's) automation solution.

Webinar

Learn the steps you can take to boost employee trust in compliance with US Privacy Laws in our US Privacy Masterclass on Employee Rights Fulfilment.

Webinar

Join us in our US Privacy Masterclass as we delve into the evolving US privacy landscape and how you can build a trust-based privacy program in 2023.

Webinar

Join us in our US Privacy Masterclass on Risk and DPIAs to understand the operational components for risk assessments/data protection assessments.

Webinar

Our US Privacy Masterclass on Retention & Minimization will help you understand data policy requirements across US Privacy Laws.

Webinar

Join industry experts at OneTrust & Protiviti for an operational deep dive and interactive Q&A on the upcoming US State laws set to go into effect in 2023.

Checklist

Download this checklist to make sure your organization follows the right steps to implement processes that achieve California Privacy Rights Act compliance.

eBook

Learn about the different opt-out requirements, such as a “Do Not Sell My Personal Information” in the US privacy landscape, and how to comply with them.

eBook

Learn more about the three priorities for managing US privacy requirements, including addressing the most visible aspects of US privacy compliance.

Webinar

Join our experts to understand the operational impact of these newly-expanded US consumer rights and how to automate consumer rights request fulfillment.

Webinar

In this webinar, OneTrust experts discuss requirements for conducting PIAs: why they exist, when you should do them, and what they should include.

Webinar

In this session, legal experts Michelle Schaap and Andy Lee are joined by OneTrust DataGuidance to provide an overview of what the ADPPA entails.

Webinar

Attend our webinar, "Establishing and enforcing retention policies," part of the US Privacy Laws Masterclass Series.

eBook

Download this guide to learn how you can comply with the CCPA's opt-out requirements to get on the right track to CCPA compliance.

White Paper

This guide to California privacy law compliance helps your organization understand the requirements under the CCPA and CPRA.

Webinar

Watch our webinars on the latest privacy laws from Utah and Connecticut and what you need to know to prepare in 2023.

Webinar

Join us for a Q&A on the several US state laws going in effect in 2023.

eBook

Download this eBook and explore the key areas of US state privacy laws and how they compare.

Resource Kit

These resources provide key information on US privacy law through blogs, webinars, and eBooks.

Checklist

Download our six step checklist for US privacy laws and ensure that your company remains compliant in 2023.

Webinar

Join us for an overview of Utah's Consumer Privacy Act (UCPA) and its impact on your organization.

Webinar

Attend our webinar, to better understand privacy laws in the US.

Webinar

Watch our webinar as we discuss privacy impact assessments and how they relate to US privacy laws.

Webinar

Watch our US Privacy Law masterclass to learn about opt-out of sales and share requirements and best practices for approaching compliance.

Webinar

Watch our webinar on US privacy laws and gain insight on effective personal information managment strategies.

Webinar

Join us for an overview of US privacy laws and strategies for dealing with compliance.

Webinar

In the first part of our US Privacy Series, we discuss US privacy laws such as the CPRA and best practices towards compliance.

Infographic

Download our infographic on employee rights under the CPRA to help prepare for the law's expansion in CPRA.

eBook

The Ultimate Guide to CCPA Compliance eBook highlights key compliance areas of the CCPA that you should consider when building a privacy program.

eBook

Download this eBook for an overview of the Virginia Consumer Data Protection Act (CDPA) to understand what it means for organizations.

Webinar

Watch our OneTrust CCPA Masterclass Series and learn how to prepare your organization for CCPA compliance.

Webinar

Join this US Privacy Masterclass series as we delve into the evolving US privacy landscape and how you can build a trust-based privacy program in 2023.

Webinar

Watch the OneTrust US Privacy Masterclass series and gain insight on the major US privacy law and best practices.

We’re here to help demystify US data privacy regulations. Explore answers to frequently asked questions below.

More than 17 states have enacted comprehensive privacy laws. Other states have introduced bills for committee evaluation. In addition to comprehensive state-level laws, the US also has privacy laws that govern specific types of data. For example, HIPAA is a federal law that protects sensitive patient health information and COPPA protects children’s online privacy.


Explore the DataGuidance US privacy tracker to learn more about emerging and new laws.

The EU’s General Data Protection Regulation (GDPR) focuses on a person’s right to privacy whereas much of the US legislation focuses on the data security safeguards of consumers and employees. Regardless of whether your business is located in the EU or US, or other countries with data privacy laws, if data is processed across borders, relevant privacy and data protection laws apply.


OneTrust Notice Management can simplify how you comply with the various requirements of privacy regulations.