50States
PDI · 50-state privacy evidence register
Privacy Enforcement Across All 50 States
Explore state-specific privacy and data-security enforcement actions using official Attorney General and state-agency sources.
133Verified cases
133Official sources
Every state · 50-state evidence register
Find the evidence that matters to your jurisdiction.
Search by state, abbreviation, company, law or enforcer. Each state links to its law context and its official-source case register.
50 states shown
| State | Privacy law / status | Principal enforcer | Mapped outcomes | Verified cases | Evidence |
|---|---|---|---|---|---|
| AlabamaAL | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Alabama Attorney General | 6 | 3 | View cases →State law context |
| AlaskaAK | No comprehensive consumer privacy law verified in force (2021 Consumer Data Privacy Act bills HB 159/SB 116 were pending bill text only) No verified general law / n.a.Bills only - not verified as enacted |
Alaska Attorney General / Department of Law | 6 | 3 | View cases →State law context |
| ArizonaAZ | No comprehensive consumer privacy law verified (SB 1614/SB 1815 were bills) No verified general law / n.a.Bills only |
Arizona Attorney General | 6 | 3 | View cases →State law context |
| ArkansasAR | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Arkansas Attorney General | 6 | 3 | View cases →State law context |
| CaliforniaCA | Yes - California Consumer Privacy Act of 2018 as amended (CCPA/CPRA) Verified comprehensive lawIn force; reviewed statute copy marked effective 01/01/2025 |
Attorney General and California Privacy Protection Agency (CalPrivacy) | 5 | 3 | View cases →State law context |
| ColoradoCO | Yes - Colorado Privacy Act Verified comprehensive lawEnacted and in force per reviewed session law |
Colorado Attorney General (and district attorneys under the CPA's own terms; state-level enforcer is the AG) | 6 | 3 | View cases →State law context |
| ConnecticutCT | Yes - Connecticut Data Privacy Act (CTDPA) Verified comprehensive lawCodified and in force per reviewed chapter |
Connecticut Attorney General (exclusive enforcement) | 6 | 4 | View cases →State law context |
| DelawareDE | Yes - Delaware Personal Data Privacy Act (DPDPA) Verified comprehensive lawIdentified as the operative comprehensive law in an official AG notice letter |
Delaware Department of Justice / Attorney General | 6 | 3 | View cases →State law context |
| FloridaFL | Yes - Florida Digital Bill of Rights Verified comprehensive lawCodified; effective July 1, 2024 per the 2023 statutes copy |
Florida Attorney General (Department of Legal Affairs) | 6 | 3 | View cases →State law context |
| GeorgiaGA | No comprehensive consumer privacy law verified (SB 473 was a pending bill) No verified general law / n.a.Bill only |
Georgia Attorney General | 6 | 3 | View cases →State law context |
| HawaiiHI | No comprehensive consumer privacy law verified (SB 1037 (2025) was a pending bill) No verified general law / n.a.Bill only |
Hawaii Attorney General; Office of Consumer Protection (DCCA) | 6 | 3 | View cases →State law context |
| IdahoID | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Idaho Attorney General | 6 | 3 | View cases →State law context |
| IllinoisIL | No comprehensive consumer privacy law verified (SB 340/SB 52 were bills). Illinois' Biometric Information Privacy Act was not established in the available official source. No verified general law / n.a.Bills only |
Illinois Attorney General | 6 | 3 | View cases →State law context |
| IndianaIN | n.a. - Indiana's Consumer Data Protection Act was not established by an available official source in this reference No verified general law / n.a.n.a. |
Indiana Attorney General | 6 | 3 | View cases →State law context |
| IowaIA | Yes - Consumer Data Protections Verified comprehensive lawCodified in the 2025 Iowa Code |
Iowa Attorney General | 6 | 3 | View cases →State law context |
| KansasKS | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Kansas Attorney General | 6 | 1 | View cases →State law context |
| KentuckyKY | Yes - Kentucky Consumer Data Protection Act Verified comprehensive lawEnacted; effective January 1, 2026 per the official bill record |
Kentucky Attorney General | 6 | 3 | View cases →State law context |
| LouisianaLA | No comprehensive consumer privacy law verified in force (located text was an enrolled/pending bill) No verified general law / n.a.Bill text only |
Louisiana Attorney General | 6 | 1 | View cases →State law context |
| MaineME | No comprehensive consumer privacy law verified (LD 1088 Maine Consumer Data Privacy Act was a pending bill) No verified general law / n.a.Bill only; sector-specific broadband privacy law exists at 35-A M.R.S. ch. 94, § 9301 |
Maine Attorney General | 6 | 3 | View cases →State law context |
| MarylandMD | Yes - Maryland Online Data Privacy Act of 2024 Verified comprehensive lawEnacted; effective October 1, 2025 per the enrolled chapter |
Maryland Attorney General (Consumer Protection Division) | 6 | 3 | View cases →State law context |
| MassachusettsMA | No comprehensive consumer privacy law verified in force (Massachusetts Consumer Data Privacy Act passed the House 146-0 on June 4, 2026 and returned to the Senate) No verified general law / n.a.Pending legislation as of the reviewed page |
Massachusetts Attorney General | 6 | 3 | View cases →State law context |
| MichiganMI | No comprehensive consumer privacy law verified (SB 659 'Personal Privacy Data Act' was a pending bill) No verified general law / n.a.Bill only |
Michigan Attorney General | 6 | 3 | View cases →State law context |
| MinnesotaMN | Yes - Minnesota Consumer Data Privacy Act Verified comprehensive lawCodified; the revisor page states a July 2025 effective date (exact day not captured in the reviewed excerpt) |
Minnesota Attorney General | 6 | 3 | View cases →State law context |
| MississippiMS | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Mississippi Attorney General; Mississippi Insurance Department for insurance data security | 6 | 3 | View cases →State law context |
| MissouriMO | No comprehensive consumer privacy law verified (SB 731 was a pending bill) No verified general law / n.a.Bill only |
Missouri Attorney General | 6 | 1 | View cases →State law context |
| MontanaMT | Yes - Montana Consumer Data Privacy Act Verified comprehensive lawCodified in MCA 2025; effective October 1, 2024 per the official legislative memo |
Montana Attorney General (Office of Consumer Protection) | 6 | 1 | View cases →State law context |
| NebraskaNE | Yes - Nebraska Data Privacy Act Verified comprehensive lawCodified in the Nebraska Revised Statutes |
Nebraska Attorney General | 6 | 3 | View cases →State law context |
| NevadaNV | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Nevada Attorney General | 6 | 3 | View cases →State law context |
| New HampshireNH | n.a. - New Hampshire's comprehensive privacy act was not established by an available official source in this reference No verified general law / n.a.n.a. |
New Hampshire Attorney General (Consumer Protection and Antitrust Bureau) | 6 | 3 | View cases →State law context |
| New JerseyNJ | Yes - New Jersey Data Privacy Law (NJDPL) Verified comprehensive lawIdentified as operative law by the Division of Consumer Affairs FAQ |
New Jersey Attorney General / Division of Consumer Affairs | 6 | 3 | View cases →State law context |
| New MexicoNM | No comprehensive consumer privacy law verified (HB 214 (2026) and HB 410 (2025) were pending bills) No verified general law / n.a.Bills only |
New Mexico Attorney General (New Mexico Department of Justice) | 6 | 3 | View cases →State law context |
| New YorkNY | No comprehensive consumer privacy law verified (the New York Privacy Act bills S365/A4947 remain pending) No verified general law / n.a.Bills only |
New York Attorney General (with the Department of Financial Services for regulated entities) | 6 | 3 | View cases →State law context |
| North CarolinaNC | No comprehensive consumer privacy law verified (SB 757 and HB 462 (2025) were pending bills) No verified general law / n.a.Bills only |
North Carolina Attorney General (Department of Justice) | 6 | 3 | View cases →State law context |
| North DakotaND | No comprehensive consumer privacy law verified (HB 1485 (2019) was a pending bill) No verified general law / n.a.Bill only |
North Dakota Attorney General | 5 | 2 | View cases →State law context |
| OhioOH | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Ohio Attorney General | 6 | 3 | View cases →State law context |
| OklahomaOK | No comprehensive consumer privacy law verified (HB 1012 and SB 546 were bills) No verified general law / n.a.Bills only |
Oklahoma Attorney General | 6 | 1 | View cases →State law context |
| OregonOR | Yes - Oregon Consumer Privacy Act Verified comprehensive lawIn force; effective July 1, 2024 per the state agency page |
Oregon Department of Justice / Attorney General | 6 | 3 | View cases →State law context |
| PennsylvaniaPA | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
Pennsylvania Attorney General | 6 | 3 | View cases →State law context |
| Rhode IslandRI | Yes - Rhode Island Data Transparency and Privacy Protection Act Verified comprehensive lawEnacted; provisions effective January 1, 2026 per the codified chapter page |
Rhode Island Attorney General | 6 | 1 | View cases →State law context |
| South CarolinaSC | No comprehensive consumer privacy law verified (H.4696 and S.932 were pending bills) No verified general law / n.a.Bills only |
South Carolina Attorney General | 6 | 3 | View cases →State law context |
| South DakotaSD | No comprehensive consumer privacy law verified (SB 111 (2026) was a pending bill) No verified general law / n.a.Bill only |
South Dakota Attorney General | 6 | 3 | View cases →State law context |
| TennesseeTN | Yes - Tennessee Information Protection Act (TIPA) Verified comprehensive lawDescribed by the AG as an enacted comprehensive consumer privacy law |
Tennessee Attorney General | 6 | 3 | View cases →State law context |
| TexasTX | Yes - Texas Data Privacy and Security Act (TDPSA) Verified comprehensive lawIn force; effective July 1, 2024, with § 541.055(e) effective January 1, 2025 |
Texas Attorney General (exclusive enforcement) | 6 | 3 | View cases →State law context |
| UtahUT | Yes - Utah Consumer Privacy Act Verified comprehensive lawCodified; § 13-61-202 effective December 31, 2023 |
Utah Attorney General with the Utah Division of Consumer Protection (division/AG split not verified on the reviewed pages) | 6 | 3 | View cases →State law context |
| VermontVT | Yes (enacted, not yet in force) - Vermont Data Privacy and Online Surveillance Act Verified comprehensive lawEnacted; effective January 1, 2028 per the enacted act text - NOT in force as of August 25, 2026 |
Vermont Attorney General | 6 | 3 | View cases →State law context |
| VirginiaVA | Yes - Virginia Consumer Data Protection Act Verified comprehensive lawCodified and in force per the official Virginia Code site |
Virginia Attorney General (exclusive enforcement) | 6 | 3 | View cases →State law context |
| WashingtonWA | No general comprehensive consumer privacy law verified; Washington My Health My Data Act (consumer health data) is in force No verified general law / n.a.Codified and in force per the RCW site |
Washington Attorney General | 5 | 3 | View cases →State law context |
| West VirginiaWV | No comprehensive consumer privacy law verified No verified general law / n.a.n.a. |
West Virginia Attorney General | 6 | 1 | View cases →State law context |
| WisconsinWI | No comprehensive consumer privacy law verified (AB 466 (2023) was a pending bill) No verified general law / n.a.Bill only |
Wisconsin Attorney General (Department of Justice); Office of the Commissioner of Insurance for insurance data security | 6 | 1 | View cases →State law context |
| WyomingWY | No comprehensive consumer privacy law verified (Wyoming Data Privacy Act drafts were interim-committee working drafts) No verified general law / n.a.Draft bills only |
Wyoming Attorney General (Consumer Protection and Antitrust Unit) | 6 | 2 | View cases →State law context |
No states match the selected filters.
Evidence methodology
Official records, not inflated totals.
Verified cases are the 133 concluded privacy, data-breach and data-security enforcement actions in the authoritative September 16, 2026 source dataset. Every displayed record retains its supplied official link.
Mapped outcomes are privacy-control outcomes associated with the state evidence context; mapping does not imply every statutory obligation is satisfied.
Multistate amounts are reproduced as stated by the official source. They are not summed as unique state penalties or promoted as a nationwide dollar total.
Follow the official evidence path
Use a state page to review law and evidence context, then open its verified case register for the exact official-source records.