Digital Privacy Laws 2026: What Your State Actually Protects (and What It Doesn't)

# Digital Privacy Laws 2026: What Your State Actually Protects (and What It Doesn't)

> **Quick answer:** As of 2026, only 20 states have comprehensive digital privacy laws — meaning roughly 30 states offer you almost no legal protection over your personal data. Worse, a new federal bill introduced in April 2026 would gut California's gold-standard protections and replace them with a weaker national ceiling. Whether you can delete your data, sue a company for misusing it, or opt out of surveillance advertising depends almost entirely on your zip code.

Digital privacy laws in 2026 have never been more important — or more unevenly enforced. This year, three new states joined the list of jurisdictions with comprehensive consumer data protections. But a landmark federal bill now threatening to override all of them could leave tens of millions of Americans *less* protected than they are today. Here is the full picture, state by state, and what it means for your personal data right now.

## The 2026 Map: Who Has Laws and Who Doesn't

Twenty states now have comprehensive consumer digital privacy laws on the books. The three newest entrants — **Indiana**, **Kentucky**, and **Rhode Island** — saw their laws take effect on January 1, 2026, joining California, Colorado, Connecticut, Virginia, Texas, Oregon, Minnesota, New Jersey, Montana, Delaware, Maryland, New Hampshire, Nebraska, Iowa, Tennessee, Utah, and Florida.

These laws generally grant residents the right to: