Data Privacy Laws
481 articles · page 8 of 9
U
UAE PDPL vs. GDPR: Federal Law, DIFC, and ADGM Compared
The UAE has three data protection regimes, not one. Compare GDPR against the federal PDPL, DIFC law, and ADGM Regulations side by side.
UCPA Compliance Checklist for Businesses (Utah 2026)
A step-by-step UCPA compliance checklist: applicability ($25M+), privacy notice, sensitive-data opt-out, processor contracts, 45-day requests, $7,500 penalties.
UCPA Consumer Rights: Access, Delete & Opt Out (Utah)
Utah residents have 4 UCPA rights under Section 13-61-201: access, delete, portability, and opt out of sale and targeted ads. Controllers must respond in 45 days.
UK Data Privacy Laws: UK GDPR, DPA 2018 & 2025 Reforms
Complete 2026 guide to UK data privacy laws: UK GDPR, Data Protection Act 2018, the Data Use and Access Act 2025 (DUAA) reforms, ICO enforcement, EU adequacy renewed to 2031, and PECR cookie changes.
UK's Data (Use and Access) Act 2025 Rewrites UK GDPR Rules: What Changed and When
The Data (Use and Access) Act 2025 reshapes UK GDPR, the DPA 2018 and PECR. Royal Assent on 19 June 2025, with key privacy rules in force from 5 February 2026.
Ukraine Data Privacy Laws: Personal Data Protection, Draft Law 8153, and the GDPR Reform (2026)
Complete guide to Ukraine's data privacy laws: the 2010 Law on Personal Data Protection, the Ombudsperson as supervisory authority, Draft Law 8153 and its GDPR-alignment status, EU accession obligations, cross-border transfer rules, martial-law context, and penalties.
Union Bank MOVEit Settlement: Claims Closed, Awaiting Approval
The Union Bank and Trust MOVEit settlement closed claims July 21, 2026 and awaits a ruling after its August 6, 2026 hearing. See who was eligible and what is next.
Uruguay Data Privacy Laws: Law 18.331, URCDP, and EU Adequacy (2026)
Complete guide to Uruguay data privacy laws: Law 18.331, Decree 414/009, DPO rules, 72-hour breach notification, EU adequacy reaffirmed 2024, Convention 108+, and URCDP enforcement.
US Cookie Laws: State-by-State Guide (2026)
State-by-state guide to US cookie and online tracking laws covering California, Colorado, Connecticut, Virginia, and all states with cookie provisions.
US Data Broker Registration Laws & the Delete Act
Four states (CA, TX, OR, VT) require data brokers to register as of 2026. California's Delete Act and DROP let consumers delete data from every broker at once.
US State Privacy Laws Comparison Chart & Tracker (2026)
Side-by-side comparison and tracker of every US state comprehensive privacy law: rights, thresholds, enforcement, plus upcoming effective dates through 2028, verified current.
Utah Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Utah's UCPA classifies biometric data as sensitive with opt-out rights. Learn about consumer rights, AG enforcement, and $7,500 per violation penalties.
Utah Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Utah requires data breach notification without unreasonable delay. Learn about the 2024 AG/Cyber Center reporting requirement at 500+, $2,500 per-consumer penalties, and investigation obligation.
Utah Data Privacy Laws: UCPA Consumer Rights Guide (2026)
Learn about Utah data privacy laws including the UCPA, consumer rights, business obligations, penalties up to $7,500 per violation, and data breach notification rules.
Utah Digital Choice Act Takes Effect: Data Portability Rules
Utah's Digital Choice Act (HB 418) is now in force as of July 1, 2026, requiring social media data portability and interoperability. What the law requires.
V
VCDPA Compliance Checklist for Businesses (2026)
Step-by-step VCDPA compliance checklist: applicability thresholds, sensitive data opt-in consent, data protection assessments, processor contracts, and AG enforcement rules for Virginia businesses.
VCDPA Consumer Rights: Exercise Your Virginia Privacy Rights
Virginia residents have five VCDPA rights: access, correct, delete, portability, and opt-out. Learn how to submit requests, appeal denials, and escalate to the VA AG.
Verizon Settlement: Paid, Real Payout Was $2.37 to $14
The $100M Verizon administrative charge settlement is paid. Real payouts were $2.37 to $14, not the promised $15 to $100. Claims closed April 2024.
Vermont Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Vermont's comprehensive biometric privacy bill H.121 was vetoed in 2024. Learn about current protections under breach notification and data broker laws.
Vermont Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Vermont requires data breach notification within 45 days plus a 14-day preliminary AG notice. Learn who must comply, protected data types, penalties, and reporting rules.
Vermont Data Privacy Laws: Data Broker Registry & Consumer Rights (2026)
Vermont data privacy laws explained: first-in-the-nation data broker registry, 45-day breach notification rules, student privacy protections, and consumer rights.
Vietnam Data Privacy Laws: Personal Data Protection Law 2025 Complete Guide
Complete guide to Vietnam data privacy laws. Covers Law No. 91/2025/QH15 (effective January 1, 2026), Decree 356, cross-border transfers, data subject rights, and penalties.
Virginia Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Learn how Virginia's VCDPA protects biometric data like fingerprints and iris scans. Opt-in consent required, AG enforcement, up to $7,500 per violation.
Virginia Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Virginia requires data breach notification to the Attorney General and affected residents without unreasonable delay. Learn about the $150,000 penalty cap and private right of action for direct economic damages.
Virginia Data Privacy Laws: VCDPA Consumer Rights Guide (2026)
Learn about Virginia data privacy laws including the VCDPA, consumer rights, business obligations, penalties up to $7,500, and data breach notification rules.
W
Washington Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Guide to Washington biometric privacy laws under RCW 19.375, including notice and consent rules, penalties up to $7,500 per violation, government biometric restrictions, and My Health My Data Act overlap.
Washington Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Washington requires data breach notification within 30 days and has one of the broadest PI definitions in the U.S. Learn reporting rules, AG notification, and private right of action.
Washington Data Privacy Laws: My Health My Data Act & More (2026)
Learn about Washington data privacy laws including the My Health My Data Act, biometric privacy protections, and breach notification rules under state law.
West Virginia Biometric Privacy Laws: Collection, Consent & Penalties (2026)
West Virginia has no biometric privacy law, and its breach notification statute excludes biometric data. Learn about proposed HB 5567 and current protections.
West Virginia Data Breach Notification Laws: Reporting Rules & Timelines (2026)
West Virginia requires data breach notification without unreasonable delay. Learn its narrow PI definition, no AG reporting requirement, encryption safe harbor, and $150K penalty cap.
West Virginia Data Privacy Laws: Breach Notification & Consumer Rights (2026)
Learn about West Virginia data privacy laws including breach notification requirements, identity theft penalties, credit freeze rights, and pending consumer data protection legislation.
What Is CCPA? California Consumer Privacy Act Explained (2026)
The CCPA gives California residents the right to know, delete, and opt out of the sale of personal data. Learn about scope, penalties, enforcement, and how CPRA expanded the law.
What Is GDPR? Complete Guide to EU Data Protection (2026)
GDPR is the EU data protection law. Learn the 7 principles, your data subject rights, who must comply, and fines up to EUR 20M or 4% of global turnover.
What Is MHMDA? WA My Health My Data Act
Washington's My Health My Data Act (ch. 19.373 RCW) took effect in 2024, has no size threshold, bans health-facility geofencing, and allows private lawsuits.
What Is MODPA? Maryland Online Data Privacy Act
MODPA (Md. Com. Law 14-4601 et seq.) took effect Oct 1, 2025, the strictest US state privacy law: hard data minimization and a ban on selling sensitive data.
What Is the Colorado Privacy Act (CPA)?
Colorado Privacy Act (2023): 5 consumer rights, mandatory GPC opt-out, up to $20,000/violation. Learn who it covers, 2025-26 amendments, and enforcement rules.
What Is the CTDPA? Connecticut Data Privacy Act Explained
The CTDPA (Conn. Gen. Stat. § 42-515 et seq.) is Connecticut's comprehensive data privacy law, effective July 1, 2023. Learn who it covers, consumer rights, the universal opt-out deadline, and penalties.
What Is the DPDPA? Delaware Data Privacy Act
The DPDPA (Del. Code tit. 6, ch. 12D) took effect Jan 1, 2025, covers many nonprofits and colleges, and carries AG penalties up to $10,000 per violation.
What Is the FDBR? Florida Digital Bill of Rights
The FDBR (Fla. Stat. 501.701 et seq.) took effect July 1, 2024, with the narrowest controller test in the US: over $1B revenue plus a big-tech prong.
What Is the ICDPA? Iowa's Data Privacy Law Explained
The Iowa Consumer Data Protection Act (Iowa Code 715D) took effect Jan. 1, 2025. Its limited rights make it the most business-friendly U.S. state privacy law.
What Is the INCDPA? Indiana's Data Privacy Law
The Indiana Consumer Data Protection Act (IC 24-15) takes effect Jan. 1, 2026, the longest runway of any state privacy law. A Virginia-style INCDPA explainer.
What Is the KCDPA? Kentucky Consumer Data Privacy
The KCDPA (KRS 367.3611 to 367.3629) takes effect January 1, 2026, a close clone of Virginia's law with a 100,000-consumer threshold and opt-in sensitive data.
What Is the MCDPA? Montana Data Privacy Law (2026)
The Montana Consumer Data Privacy Act (Mont. Code Ann. 30-14-2801) took effect Oct 1, 2024 and now carries the nation's lowest thresholds: 25,000/15,000.
What Is the Minnesota Consumer Data Privacy Act (MCDPA)?
The Minnesota Consumer Data Privacy Act (Minn. Stat. ch. 325M) took effect July 31, 2025, with a unique right to question profiling decisions.
What Is the NDPA? Nebraska Data Privacy Law (2026)
The Nebraska Data Privacy Act (Neb. Rev. Stat. 87-1101) took effect Jan 1, 2025 and uses the Texas-style federal small-business test, with no numeric threshold.
What Is the NHDPA? New Hampshire Data Privacy Act
The NHDPA (RSA 507-H) took effect January 1, 2025, with a low 35,000-consumer threshold and opt-in sensitive data. AG enforces; no private right of action.
What Is the NJDPA? New Jersey Data Privacy Act
The NJDPA (N.J.S.A. 56:8-166.4 et seq.) took effect Jan 15, 2025, treats financial data as sensitive, and carries AG penalties up to $10,000 per first violation.
What Is the OCPA? Oregon Consumer Privacy Act
The OCPA (ORS 646A.570 to 646A.589) took effect July 1, 2024, with no dollar threshold and a rare specific-third-party-list right. AG penalties up to $7,500.
What Is the RIDTPPA? Rhode Island Data Privacy Act
The RIDTPPA (R.I. Gen. Laws 6-48.1) takes effect Jan 1, 2026, with a 35,000-customer threshold, opt-in sensitive data, and a unique third-party disclosure duty.
What Is the TDPSA? Texas Data Privacy and Security Act
The TDPSA (Tex. Bus. & Com. Code ch. 541) took effect July 1, 2024. Learn who it covers, consumer rights, and up to $7,500 per-violation AG enforcement.
What Is the TIPA? Tennessee Information Protection Act
The TIPA (Tenn. Code Ann. 47-18-3201 et seq.) took effect July 1, 2025, with a $25M revenue gate and a unique NIST Privacy Framework affirmative defense.
What Is the UCPA? Utah Consumer Privacy Act Explained
The Utah Consumer Privacy Act (Utah Code 13-61-101) took effect Dec. 31, 2023. Its $25M AND-gated threshold makes Utah's coverage the narrowest U.S. state law.
What Is the VCDPA? Virginia's Data Privacy Law Explained
The VCDPA (Va. Code Ann. § 59.1-575) is Virginia's comprehensive data privacy law, effective Jan 1, 2023. Learn who it covers, consumer rights, and penalties.
What To Do After a Data Breach: A Step-by-Step Guide
Got a data breach letter? Verify it's real, freeze your credit free at all three bureaus, then enable free monitoring, in that order, before anything else.
Willow TV VPPA Settlement: Claims Closed, Hearing Oct 22, 2026
The Willow TV VPPA settlement closed claims July 21, 2026. The final approval hearing was reset to October 22, 2026; the $850,000 fund pays pro rata.
Wisconsin Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Wisconsin's breach notification law covers biometric data and DNA profiles with a 45-day notice rule. Learn about protections and proposed legislation.
Wisconsin Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Wisconsin requires data breach notification within 45 days. Learn its PI definition covering biometric data and DNA, no AG reporting requirement, and $10,000 per violation penalty.
Wisconsin Data Privacy Laws: Breach Notification & Consumer Rights (2026)
Wisconsin requires 45-day breach notification under Wis. Stat. 134.98, protects student records through Wis. Stat. 118.125, and has pending comprehensive privacy legislation.
Wyoming Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Wyoming protects biometric data only through breach notification law Wyo. Stat. 40-12-501. Learn about requirements, penalties, and gaps.
Wyoming Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Wyoming requires data breach notification without unreasonable delay for private sector entities. Learn its broad PI definition including biometric data, enforcement rules, and safe harbors.