US State Privacy Bills Tracker
Every US state\u2019s current position on comprehensive consumer-privacy legislation: signed laws, bills in cross chamber, bills in committee, inactive bills, and states with no comprehensive bill introduced. Based on IAPP\u2019s state-legislation tracker (April 13, 2026 snapshot).
Signed
20
states
Advanced bills
6
states
In committee
9
states
Inactive / none
15
states
Comprehensive law enacted (20)
Passed legislature (awaiting signature) (1)
In cross chamber (2)
In cross committee (3)
In committee (9)
Inactive bills (8)
No comprehensive bills introduced (7)
Don\u2019t wait on legislation
Use existing deletion rights today \u2014 $2
OfflistMe uses CCPA, GDPR, and state-law deletion rights that already exist \u2014 no matter which state you\u2019re in. 200+ brokers covered.
Start for $2 →FAQ
How many US states have comprehensive consumer privacy laws as of April 2026?+
20 US states have enacted comprehensive consumer-privacy laws. California led with the CCPA (2020, amended by CPRA in 2023); the most recent additions are Delaware, Indiana, Kentucky, and Rhode Island, all effective January 2026. Maryland’s MODPA (October 2025) is currently considered the strictest.
What does "in cross chamber" mean for a privacy bill?+
Cross chamber means the bill has passed one legislative chamber (House or Senate) and moved to the other for consideration. Pennsylvania and Louisiana are currently at this advanced stage — one more chamber approval + governor signature and they become law.
Why do some states have both signed laws and bills in progress?+
IAPP’s tracker shows current legislative activity. A state like New Jersey (NJDPA signed) or Rhode Island (RIDTPPA signed) can also have additional bills in progress — amendments, narrower-scope bills, or supplementary protections. These additional bills are separate from the already-enacted law.
Which states are next to pass comprehensive privacy laws?+
Based on April 2026 status, Alabama has already passed both chambers and awaits governor signature. Pennsylvania, Louisiana, Vermont, Massachusetts, and New Jersey (supplementary bill) are most advanced among states without final enactment. Expect 2-4 more states to enact comprehensive laws in 2026.
What about states with inactive or no bills?+
8 states have previously-introduced bills that have stalled without advancing. 7 states have no comprehensive privacy bills introduced at all. Residents of these states still have consumer-protection and deceptive-practices statutes, plus cross-state CCPA leverage against national brokers.
Related
Source: IAPP US State Privacy Legislation Tracker, snapshot April 13, 2026. Status classifications reflect bills currently moving; a state with an enacted comprehensive law may also have additional bills in earlier stages.