Data Privacy and Governance

---

New data privacy laws in Tennessee, Indiana, Montana and Iowa put these states on par with Connecticut, Colorado, Virginia, Utah and Texas. These states all have data privacy laws which, among other things, require affirmative opt-in and consent before you can use someone’s email address, such as adding it to a mailing list or using it for targeted advertising. It’s important to understand that data privacy laws don't just apply to businesses which are headquartered in those states -- most of these state laws also apply to anyone doing business in that state.  

UPCOMING STATE DATA PRIVACY LAWS for 2024

On December 31, 2023, Utah's Consumer Privacy Act will take effect. The law applies to businesses that have at least  

US $25 million in annual revenue, and either (a) control or process the  personal information of 100,000 or more Utah consumers during a calendar year, or (b) derive more than 50 percent of their gross revenue from the sale of personal information and control or process the personal  information of 25,000 or more Utah consumers. Though the law provides a 30-day cure period, covered businesses should endeavor to meet their compliance obligations before the end of the year.

On July 1, 2024, Florida's Digital Bill of Rights, Oregon's Consumer Privacy Act, and Texas' Data Privacy and Security Act will take effect. On October 1, 2024, Montana's Consumer Data Privacy Act will also take effect. 

Call us for a free data privacy evaluation report.