In the US, Consumer Data Protection is currently enforced at the state level and part of a broader trend towards more stringent data protection and privacy regulations. While specifics can vary by state, the basic protections commonly found in these laws are centered around a Consumer’s Right to Access their data and request its deletion.
In short, these laws provide Consumers with the right to request access to the personal data that businesses collect about them. This includes information about what data is collected, how it is used, and with whom it is shared. At RampedUp, we provide a portal where consumers can access their data https://basic.rampedup.io/app/donotsell and request the deletion or correction of their personal information.
While RampedUp will process any request regardless of state requirements, below are the states currently with data privacy laws and when they became effective. Note some are in the future as of the time of this posting:
California Consumer Protection Act (CCPA)
Jan. 1, 2020
Connecticut Consumer Data Privacy Act (CTDPA)
July 1, 2023
https://portal.ct.gov/ag/sections/privacy/the-connecticut-data-privacy-act
Colorado Privacy Act (CPA)
July 1, 2023
https://coag.gov/resources/colorado-privacy-act/
Delaware Personal Data Protection Act (DPDA)
Jan 1, 2025
https://legis.delaware.gov/BillDetail?LegislationId=140388
Florida Digital Bill of Rights (FLDBOR)
July 1, 2024
Indiana Consumer Data Protection Act (INCDPA)
Jan 1, 2026
https://www.in.gov/mph/cdo/privacy/
Iowa Act Relating to Consumer Data Protection (ICDPA)
Jan 1, 2025
https://www.legis.iowa.gov/legislation/BillBook?ba=SF%20262&ga=90
Kentucky Consumer Data Privacy Act (KCDPA)
Jan 1, 2026
https://apps.legislature.ky.gov/record/24RS/hb15.html
Maryland Online Data Privacy Act (MODPA)
Oct 1, 2025
https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/sb0541
Minnesota Consumer Data Privacy Act (MNCDPA)
July 31, 2025
Montana Data Privacy Act (MDPA)
Oct 1, 2024
https://leg.mt.gov/bills/2023/billpdf/SB0384.pdf
Nebraska Data Privacy Act (NDPA)
Jan 1, 2025
https://nebraskalegislature.gov/bills/view_bill.php?DocumentID=54904
New Hampshire Data Privacy Act (NHDPA)
Jan 1, 2025
https://gencourt.state.nh.us/bill_status/billinfo.aspx?id=865&inflect=1
New Jersey Data Privacy Act (NJDPA)
Jan 15, 2025
https://www.njleg.state.nj.us/bill-search/2022/S332/bill-text?f=S0500&n=332_I1
Nevada Privacy Law (NPL)
May 29, 2019
https://www.leg.state.nv.us/NRS/NRS-603A.html
Oregon Consumer Privacy Act (OCPA)
July 1, 2024
https://www.doj.state.or.us/consumer-protection/id-theft-data-breaches/privacy/
Tennessee Information Protection Act (TIPA)
July 1, 2025
https://legiscan.com/TN/text/HB1181/id/2672877
Texas Data Privacy and Security Act (TDPSA)
July 1, 2024
Utah Consumer Privacy Act (UCPA)
March 24, 2022
Vermont Data Privacy Act (VDPA)
July 1, 2024
Virginia Consumer Data Protection Act (VCDPA)
March 21, 2021
https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/
Washington Privacy Act (WPA)
July 23, 2023
https://www.atg.wa.gov/protecting-washingtonians-personal-health-data-and-privacy
