State Comprehensive Privacy Law Round-Up: Several States Amend Their Privacy Statutes - Inside Privacy
Several US states have amended their comprehensive privacy laws, affecting requirements for data brokers, opt-out mechanisms, and risk assessments. Key changes include expanded definitions of sensitive data, mandatory universal opt-out signals (e.g., Global Privacy Control), and new obligations for ADMT profiling.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 23, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants should confirm how it applies to their specific situation before acting. There is a time constraint attached: Varies by state; some amendments effective Jan 1, 2025 (e.g., CT, CO, TX). Immediate review recommended.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
Amendments to state privacy statutes: (1) expanded sensitive data categories (e.g., precise geolocation, biometrics), (2) mandatory recognition of universal opt-out signals (e.g., GPC), (3) new risk assessment requirements for ADMT (automated decision-making technology), (4) data minimization obligations for targeted advertising.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, privacy consultants
What you must do
Update privacy policies and technical systems to honor universal opt-out signals; conduct risk assessments for ADMT; review data collection practices for new sensitive data categories; ensure data broker registration compliance.
Deadline
Varies by state; some amendments effective Jan 1, 2025 (e.g., CT, CO, TX). Immediate review recommended.
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- Louisiana Becomes 22nd State to Enact a Comprehensive Consumer Data Privacy Law - InsideARM
- CalPrivacy Targets Gig Economy Tech Platforms in First CCPA Compliance Audit - Hunton Andrews Kurth LLP
- GM’s Record $12.75 Million CCPA Fine: The OnStar Data Lesson - Security Boulevard
- New Jersey Enacts Law Establishing Data Broker Registration Regime and Imposing Prohibitions on Sensitive Data Sales - JD Supra
- New Jersey’s New Data Privacy Rules: What Organizations Need to Know - Freshfields