Indiana, Kentucky, and Rhode Island Privacy Laws Take Effect January 1, 2026

Three new comprehensive state privacy laws took effect on January 1, 2026. Indiana and Kentucky adopt Virginia-style thresholds that exempt many small organizations, while Rhode Island applies a lower threshold for data-sale-driven businesses. Businesses operating in these states must update privacy notices and data processing workflows.