20 States Now Have Comprehensive Consumer Privacy Laws

As of 2026, twenty states have comprehensive consumer privacy laws in effect. Three new laws took effect January 1, 2026 (Indiana, Kentucky, Rhode Island), with Connecticut, Arkansas, and Utah amendments effective July 1, 2026. Small businesses must now navigate a patchwork of state-level compliance requirements.