Three additional state privacy laws in Indiana, Kentucky, and Rhode Island took effect in 2026, expanding the U.S. total to about 20 comprehensive state privacy regimes. These laws largely follow existing frameworks but introduce varying thresholds and requirements, further complicating compliance for businesses operating across states. Organizations must assess applicability, update disclosures, and align data practices accordingly. The continued growth of this patchwork underscores the need for scalable, proactive privacy compliance strategies.
