State Privacy Law Thresholds: Most Small Businesses Still Exempt in 2026

Most 2026 state privacy laws continue to exempt small businesses through revenue and data volume thresholds. Indiana and Kentucky mirror Virginia's exemptions; Rhode Island applies lower thresholds for businesses that sell data. However, companies that sell data or target minors may be subject regardless of size.