States Lay Down the Law on Digital Privacy

When the European Union enacted the General Data Protection Regulation in 2018, one of the big questions would be whether the United States would follow suit. That hasn’t happened at the federal level, but that hasn’t stopped some states from taking the initiative.

In January, the California Consumer Privacy Act went into effect. Seen as “GDPR-lite,” the California law is the strongest data privacy law in the country, giving consumers access to their data, the right to have their personal data deleted and the ability to opt out of having their data sold. That same month, Vermont enacted a law regulating third parties that buy or resell consumer data.