Data Privacy Legislation Tracker
Nineteen state privacy regimes, and the differences are the whole job
A curated tracker for consumer privacy, biometric and breach legislation, with a monthly issue that says what changed and where.
Bills in Scope
Jurisdictions
Past Committee

Defined in writing, measured against every bill
In scope is any bill creating or amending duties over personal information: consumer rights of access, deletion, correction and opt-out; sale and sharing definitions; sensitive and biometric identifiers; breach notification timing and content; data broker registration; and the exemptions and thresholds that decide who is covered at all.
What this tracker does not cover
State administrative codes and agency guidance are out of scope. Federal rulemaking arrives through Regulatory Watch, which reads the Federal Register and nothing else, permanently.
Scopes are drafted by a model and checked by measurement against judged bills, not reviewed by an attorney. LawSignals does not give legal advice.
What's at the top of the Data Privacy Legislation feed
Ranked by how far each bill has moved, then how recently.
Matched through 10 October 2026
187Enacted
12Cleared both chambers
264Past committee
23Active in committee
824Introduced or inactive
1,310 bills in scope
Enacted
25 of 187 shown
Showing the 25 furthest along of 1,310. Sign up to see the full list →
The document you forward to a client
Every bill in it is real. Check one.
Read the August 2026 issueA real generated document, not a mockup.
The month in one paragraph
What actually happened, written rather than counted.
What moved
Every bill that advanced, grouped by how far, one line each.
Enacted
What became law, and the effective date where the text states one.
Regulatory Watch
Federal rulemaking on the same subject, led by comment deadlines.
Data Privacy Legislation, state by state
53 jurisdictions currently hold bills in this tracker
- New Jersey118
- New York93
- Virginia63
- Illinois60
- Massachusetts57
- Minnesota52
- California50
- Montana49
- Congress47
- Maryland40
- Connecticut38
- Texas36
- Oklahoma34
- Pennsylvania33
- Utah30
- Hawaii29
- Rhode Island28
- South Carolina25
- Missouri24
- Vermont23
- Iowa22
- Michigan22
- West Virginia21
- Arizona20
- Washington19
- Kentucky18
- Wisconsin18
- North Carolina17
- Florida16
- Mississippi16
- Nebraska16
- Georgia14
- New Mexico14
- Tennessee14
- Alabama13
- Colorado13
- Oregon11
- New Hampshire10
- Idaho9
- Arkansas8
- Delaware8
- Indiana8
- Louisiana8
- Ohio7
- Maine6
- South Dakota6
- Wyoming6
- Kansas5
- Alaska4
- North Dakota4
- Nevada4
- District of Columbia3
Track Data Privacy Legislation in your dashboard
The trial includes a real issue, not a sample.
Frequently Asked Questions
What does this tracker cover?
Consumer privacy rights and their exemptions, sale and sharing definitions, sensitive and biometric identifiers, breach notification timing and content, and data broker registration, across US state legislatures and Congress.
Does it include enacted law, or only pending bills?
Pending legislation is the focus, because that is what the enacted-law tools you already have are worst at. Enacted bills appear in the monthly issue with their effective date where the text states one.
How do biometric bills get caught if they are filed as health or schools bills?
Matching is on the duty a bill creates, not on its committee or its title. A schools bill that regulates a biometric identifier is scored against the same profile as a comprehensive privacy bill.
Who decides what is relevant?
A written topic profile, drafted by a model and validated by retrieval measurement against a judged set of bills. It is not reviewed by an attorney.
LawSignals is a research tool. It does not provide legal advice. Always consult qualified legal counsel.