While the new laws vary in scope, they consistently demand companies to ensure consumer access, deletion, correction, and opt-out capabilities. Yet, the prospect of novel state laws, introducing measures like blanket opt-in consent or empowering consumers to sue for alleged violations, could create compliance quagmires and Congressional stalemates.
State-Level Showdowns and Enforcement Challenges
No frontrunners emerge in the race to add more patches to the privacy law quilt in 2024. New York, Massachusetts, Hawaii, Maine, and Wisconsin, among others, are potential players, introducing proposals with game-changing provisions.
Utah set the stage by closing out 2023 with its privacy statute taking effect. In the upcoming year, the spotlight will shift to Oregon and Texas, with laws going live on July 1, and Montana’s Consumer Data Privacy Act implementation slated for October 1. Simultaneously, the enforcement tempo will rise in California, Connecticut, Colorado, and Virginia, where investigations are set to conclude.
