50States
PDI · 50-state privacy evidence register
Privacy Enforcement Across All 50 States
Explore state-specific privacy and data-security enforcement actions using official Attorney General and state-agency sources.
133Verified cases
133Official sources
Every state · 50-state evidence register
Find the evidence that matters to your jurisdiction.
Search by state, abbreviation, company, law or enforcer. Each state links to its law context and its official-source case register.
50 states shown
| State | Privacy law / status | Principal enforcer | Mapped Controls ↓ | Verified cases ↓ | Evidence |
|---|---|---|---|---|---|
| AlabamaAL | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Alabama Attorney General | 6 | 3 | View cases →State law context |
| AlaskaAK | No comprehensive consumer privacy law verified in force (2021 Consumer Data Privacy Act bills HB 159/SB 116 were pending bill text only) No verified general law / n.a.Bills only - not verified as enacted |
Alaska Attorney General / Department of Law | 6 | 3 | View cases →State law context |
| ArizonaAZ | No comprehensive consumer privacy law verified (SB 1614/SB 1815 were bills) No verified general law / n.a.Bills only |
Arizona Attorney General | 6 | 3 | View cases →State law context |
| ArkansasAR | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Arkansas Attorney General | 6 | 3 | View cases →State law context |
| CaliforniaCA | Yes - California Consumer Privacy Act of 2018 as amended (CCPA/CPRA) Verified comprehensive lawIn force; reviewed statute copy marked effective 01/01/2025 |
Attorney General and California Privacy Protection Agency (CalPrivacy) | 5 | 3 | View cases →State law context |
| ColoradoCO | Yes - Colorado Privacy Act Verified comprehensive lawEnacted and in force per reviewed session law |
Colorado Attorney General (and district attorneys under the CPA's own terms; state-level enforcer is the AG) | 6 | 3 | View cases →State law context |
| ConnecticutCT | Yes - Connecticut Data Privacy Act (CTDPA) Verified comprehensive lawCodified and in force per reviewed chapter |
Connecticut Attorney General (exclusive enforcement) | 6 | 4 | View cases →State law context |
| DelawareDE | Yes - Delaware Personal Data Privacy Act (DPDPA) Verified comprehensive lawIdentified as the operative comprehensive law in an official AG notice letter |
Delaware Department of Justice / Attorney General | 6 | 3 | View cases →State law context |
| FloridaFL | Yes - Florida Digital Bill of Rights Verified comprehensive lawCodified; effective July 1, 2024 per the 2023 statutes copy |
Florida Attorney General (Department of Legal Affairs) | 6 | 3 | View cases →State law context |
| GeorgiaGA | No comprehensive consumer privacy law verified (SB 473 was a pending bill) No verified general law / n.a.Bill only |
Georgia Attorney General | 6 | 3 | View cases →State law context |
| HawaiiHI | No comprehensive consumer privacy law verified (SB 1037 (2025) was a pending bill) No verified general law / n.a.Bill only |
Hawaii Attorney General; Office of Consumer Protection (DCCA) | 6 | 3 | View cases →State law context |
| IdahoID | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Idaho Attorney General | 6 | 3 | View cases →State law context |
| IllinoisIL | No comprehensive consumer privacy law verified (SB 340/SB 52 were bills). Illinois' Biometric Information Privacy Act was not established in the available official source. No verified general law / n.a.Bills only |
Illinois Attorney General | 6 | 3 | View cases →State law context |
| IndianaIN | n.a. - Indiana's Consumer Data Protection Act was not established by an available official source in this reference No verified general law / n.a.n.a. |
Indiana Attorney General | 6 | 3 | View cases →State law context |
| IowaIA | Yes - Consumer Data Protections Verified comprehensive lawCodified in the 2025 Iowa Code |
Iowa Attorney General | 6 | 3 | View cases →State law context |
| KansasKS | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Kansas Attorney General | 6 | 1 | View cases →State law context |
| KentuckyKY | Yes - Kentucky Consumer Data Protection Act Verified comprehensive lawEnacted; effective January 1, 2026 per the official bill record |
Kentucky Attorney General | 6 | 3 | View cases →State law context |
| LouisianaLA | No comprehensive consumer privacy law verified in force (located text was an enrolled/pending bill) No verified general law / n.a.Bill text only |
Louisiana Attorney General | 6 | 1 | View cases →State law context |
| MaineME | No comprehensive consumer privacy law verified (LD 1088 Maine Consumer Data Privacy Act was a pending bill) No verified general law / n.a.Bill only; sector-specific broadband privacy law exists at 35-A M.R.S. ch. 94, § 9301 |
Maine Attorney General | 6 | 3 | View cases →State law context |
| MarylandMD | Yes - Maryland Online Data Privacy Act of 2024 Verified comprehensive lawEnacted; effective October 1, 2025 per the enrolled chapter |
Maryland Attorney General (Consumer Protection Division) | 6 | 3 | View cases →State law context |
| MassachusettsMA | No comprehensive consumer privacy law verified in force (Massachusetts Consumer Data Privacy Act passed the House 146-0 on June 4, 2026 and returned to the Senate) No verified general law / n.a.Pending legislation as of the reviewed page |
Massachusetts Attorney General | 6 | 3 | View cases →State law context |
| MichiganMI | No comprehensive consumer privacy law verified (SB 659 'Personal Privacy Data Act' was a pending bill) No verified general law / n.a.Bill only |
Michigan Attorney General | 6 | 3 | View cases →State law context |
| MinnesotaMN | Yes - Minnesota Consumer Data Privacy Act Verified comprehensive lawCodified; the revisor page states a July 2025 effective date (exact day not captured in the reviewed excerpt) |
Minnesota Attorney General | 6 | 3 | View cases →State law context |
| MississippiMS | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Mississippi Attorney General; Mississippi Insurance Department for insurance data security | 6 | 3 | View cases →State law context |
| MissouriMO | No comprehensive consumer privacy law verified (SB 731 was a pending bill) No verified general law / n.a.Bill only |
Missouri Attorney General | 6 | 1 | View cases →State law context |
| MontanaMT | Yes - Montana Consumer Data Privacy Act Verified comprehensive lawCodified in MCA 2025; effective October 1, 2024 per the official legislative memo |
Montana Attorney General (Office of Consumer Protection) | 6 | 1 | View cases →State law context |
| NebraskaNE | Yes - Nebraska Data Privacy Act Verified comprehensive lawCodified in the Nebraska Revised Statutes |
Nebraska Attorney General | 6 | 3 | View cases →State law context |
| NevadaNV | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Nevada Attorney General | 6 | 3 | View cases →State law context |
| New HampshireNH | n.a. - New Hampshire's comprehensive privacy act was not established by an available official source in this reference No verified general law / n.a.n.a. |
New Hampshire Attorney General (Consumer Protection and Antitrust Bureau) | 6 | 3 | View cases →State law context |
| New JerseyNJ | Yes - New Jersey Data Privacy Law (NJDPL) Verified comprehensive lawIdentified as operative law by the Division of Consumer Affairs FAQ |
New Jersey Attorney General / Division of Consumer Affairs | 6 | 3 | View cases →State law context |
| New MexicoNM | No comprehensive consumer privacy law verified (HB 214 (2026) and HB 410 (2025) were pending bills) No verified general law / n.a.Bills only |
New Mexico Attorney General (New Mexico Department of Justice) | 6 | 3 | View cases →State law context |
| New YorkNY | No comprehensive consumer privacy law verified (the New York Privacy Act bills S365/A4947 remain pending) No verified general law / n.a.Bills only |
New York Attorney General (with the Department of Financial Services for regulated entities) | 6 | 3 | View cases →State law context |
| North CarolinaNC | No comprehensive consumer privacy law verified (SB 757 and HB 462 (2025) were pending bills) No verified general law / n.a.Bills only |
North Carolina Attorney General (Department of Justice) | 6 | 3 | View cases →State law context |
| North DakotaND | No comprehensive consumer privacy law verified (HB 1485 (2019) was a pending bill) No verified general law / n.a.Bill only |
North Dakota Attorney General | 5 | 2 | View cases →State law context |
| OhioOH | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Ohio Attorney General | 6 | 3 | View cases →State law context |
| OklahomaOK | No comprehensive consumer privacy law verified (HB 1012 and SB 546 were bills) No verified general law / n.a.Bills only |
Oklahoma Attorney General | 6 | 1 | View cases →State law context |
| OregonOR | Yes - Oregon Consumer Privacy Act Verified comprehensive lawIn force; effective July 1, 2024 per the state agency page |
Oregon Department of Justice / Attorney General | 6 | 3 | View cases →State law context |
| PennsylvaniaPA | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Pennsylvania Attorney General | 6 | 3 | View cases →State law context |
| Rhode IslandRI | Yes - Rhode Island Data Transparency and Privacy Protection Act Verified comprehensive lawEnacted; provisions effective January 1, 2026 per the codified chapter page |
Rhode Island Attorney General | 6 | 1 | View cases →State law context |
| South CarolinaSC | No comprehensive consumer privacy law verified (H.4696 and S.932 were pending bills) No verified general law / n.a.Bills only |
South Carolina Attorney General | 6 | 3 | View cases →State law context |
| South DakotaSD | No comprehensive consumer privacy law verified (SB 111 (2026) was a pending bill) No verified general law / n.a.Bill only |
South Dakota Attorney General | 6 | 3 | View cases →State law context |
| TennesseeTN | Yes - Tennessee Information Protection Act (TIPA) Verified comprehensive lawDescribed by the AG as an enacted comprehensive consumer privacy law |
Tennessee Attorney General | 6 | 3 | View cases →State law context |
| TexasTX | Yes - Texas Data Privacy and Security Act (TDPSA) Verified comprehensive lawIn force; effective July 1, 2024, with § 541.055(e) effective January 1, 2025 |
Texas Attorney General (exclusive enforcement) | 6 | 3 | View cases →State law context |
| UtahUT | Yes - Utah Consumer Privacy Act Verified comprehensive lawCodified; § 13-61-202 effective December 31, 2023 |
Utah Attorney General with the Utah Division of Consumer Protection (division/AG split not verified on the reviewed pages) | 6 | 3 | View cases →State law context |
| VermontVT | Yes (enacted, not yet in force) - Vermont Data Privacy and Online Surveillance Act Verified comprehensive lawEnacted; effective January 1, 2028 per the enacted act text - NOT in force as of August 25, 2026 |
Vermont Attorney General | 6 | 3 | View cases →State law context |
| VirginiaVA | Yes - Virginia Consumer Data Protection Act Verified comprehensive lawCodified and in force per the official Virginia Code site |
Virginia Attorney General (exclusive enforcement) | 6 | 3 | View cases →State law context |
| WashingtonWA | No general comprehensive consumer privacy law verified; Washington My Health My Data Act (consumer health data) is in force No verified general law / n.a.Codified and in force per the RCW site |
Washington Attorney General | 5 | 3 | View cases →State law context |
| West VirginiaWV | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
West Virginia Attorney General | 6 | 1 | View cases →State law context |
| WisconsinWI | No comprehensive consumer privacy law verified (AB 466 (2023) was a pending bill) No verified general law / n.a.Bill only |
Wisconsin Attorney General (Department of Justice); Office of the Commissioner of Insurance for insurance data security | 6 | 1 | View cases →State law context |
| WyomingWY | No comprehensive consumer privacy law verified (Wyoming Data Privacy Act drafts were interim-committee working drafts) No verified general law / n.a.Draft bills only |
Wyoming Attorney General (Consumer Protection and Antitrust Unit) | 6 | 2 | View cases →State law context |
No states match the selected filters.
Evidence methodology
Official records, not inflated totals.
Verified cases ↑ are the 133 concluded privacy, data-breach and data-security enforcement actions in the authoritative September 16, 2026 source dataset. Every displayed record retains its supplied official link.
Mapped Controls ↑ show how Kestryl's privacy-control outcomes align to each state's enforcement and evidence context. View the 10 Privacy Control Outcomes → The mapping identifies where Kestryl supports operational evidence readiness while keeping statutory compliance requirements distinct.
Multistate amounts are reproduced as stated by the official source. They are not summed as unique state penalties or promoted as a nationwide dollar total.
Follow the official evidence path
Use a state page to review law and evidence context, then open its verified case register for the exact official-source records.