The Evolving State of US Privacy: Navigating US Data Protection Legislation in 2025

How to Comply with US Data Protection Legislation in 2025?

With the advancement of connected devices, smart products, and the development of artificial intelligence, the growing importance of data protection is undeniable.

As reported by the International Association of Privacy Professionals (IAPP), as of January 2025, data protection laws are in force in 144 countries, covering more than 80% of the world’s population by some form of national privacy protection law.

Although the future of a federal consumer privacy law in the US is still unclear, individual states are moving ahead with their own data protection legislation, highlighting the need for industries to remain up to date with the evolving regulatory landscape.

This whitepaper explores the state-level laws shaping personal data privacy across the United States and examines how they affect businesses operating both inside and outside the states where they are enacted. It provides comprehensive details on US data protection legislation, including applicability of the respective laws, their entry into force, enforcement, etc.

This Whitepaper Covers:

• Thirteen state privacy laws that are already in effect
• Three acts coming into force in 2025
• Three acts taking effect in early 2026
• Table with effective dates and ‘Notice and Cure’ provision details

*This whitepaper was originally published on 24th June, 2025. Further regulatory developments may have occurred after publication. To keep up-to-date with the latest compliance news, sign up to our newsletter.