ADDITIONAL STATES ENACT CONSUMER DATA PRIVACY LAWS

Indiana, Montana and Tennessee joined six other states in enacting consumer data privacy laws. The other states with consumer data privacy laws are California (effective Jan. 1, 2020), Virginia (effective Jan. 1, 2023), Colorado (effective July 1, 2023), Connecticut (effective July 1, 2023), Utah (effective Dec. 31, 2023) and Iowa (effective Jan. 1, 2025). With the exception of the California consumer data privacy law, all the recently enacted privacy data laws are very similar. Importantly, all the state consumer date privacy laws except California include an exemption for financial institutions and data subject to the privacy provisions of the Gramm-Leach-Bliley Act. The laws give a consumer certain rights over the data collected about the consumer by businesses, including the right to know the consumer data being collected and restrict its use. Additionally, the laws require specific provisions in contracts between businesses that collect consumer data and their service providers. The Montana law will take effect October 1, 2024. The Tennessee law will take effect July 1, 2025. The Indiana law will take effect January 1, 2026. Read More