Washington – The Computer & Communications Industry Association today released its 2026 State Privacy Landscape Report. This year, four states enacted comprehensive consumer privacy laws, while others expanded on existing requirements. The report highlights how the new laws are creating an increasingly complex regulatory landscape for businesses operating across state lines.
The report shows Oklahoma, Alabama, Louisiana, and Vermont enacted comprehensive privacy laws in 2026. Twenty-three states now have comprehensive privacy laws. Lawmakers also amended existing privacy frameworks in states including Connecticut, Delaware, Maryland, and New Hampshire, adding new requirements related to data brokers, sensitive information, consumer protections, and third-party sharing.
States considered legislation targeting specific technologies and data practices, including artificial intelligence, children’s privacy, age verification, precise geolocation, data brokers, and automated decision-making. California remained the nation’s most active state privacy jurisdiction, continuing to implement new regulations and expand its oversight of consumer data practices.
While these proposals are intended to strengthen consumer privacy protections, CCIA’s report cautions that differences in state requirements are creating a growing patchwork of regulations. Varying definitions, exemptions, consent requirements, and compliance obligations can increase costs for businesses operating nationwide and create uncertainty for companies developing and deploying new technologies.
The report notes the need for a consistent national framework that protects consumers while avoiding unnecessary regulatory fragmentation. The report anticipates continued state activity as newly enacted laws take effect, existing privacy frameworks undergo further revisions, and lawmakers address the intersection of privacy and artificial intelligence.
The following statement can be attributed to Megan Stokes, State Policy Director for CCIA:
“States are developing privacy regulation and creating a growing landscape of requirements for businesses operating across the country. While protecting consumer privacy is important, inconsistent and overlapping state laws can increase compliance costs, create uncertainty, and make it harder for businesses to innovate. A consistent national framework can provide meaningful consumer protections while giving businesses the clarity they need to operate and compete.”
