Though similar in nature, state privacy laws in California, Virginia, Colorado, Utah, Connecticut, Iowa, Indiana, Tennessee, Montana, and Texas each contain inconsistencies and unique aspects. The Indiana Consumer Data Protection Act (ICDPA), for instance, will apply to businesses that control or process the personal data of at least: 100,000 consumers; or 25,000 consumers, and derive more than 50% of their gross revenue from personal data sales, while the threshold for coverage by the Tennessee Information Protection Act (TIPA) is narrower than any of the other state laws.
