# [U.S. data privacy laws by state: Effective dates and general thresholds](https://usercentrics.com/knowledge-hub/us-state-data-privacy-effective-dates-and-thresholds/)

**Author:** William Newmark · **Published:** Jul 11, 2025 · **Read time:** 3 mins

[Contact sales](https://usercentrics.com/book-a-consultation/)

---

## Summary

Each state-level data privacy law in the United States has its own effective date and compliance thresholds involving operational data processing and/or revenue. We've assembled this information for all current US state-level data privacy laws to support data privacy compliance across the US.

The United States does not have a single federal data privacy law. So companies must contend with a patchwork of federal and state-level laws, as well as industry-specific laws, like those regulating healthcare and the financial sector.

While there are similarities among all the US state-level data privacy laws passed to date, each has unique details and requirements regarding when it comes into effect and the thresholds that require companies to comply.

We've created an easily referenced table to help you determine which state data privacy laws you may need to comply with based on your operations and the states in which your company does business.

---

## U.S. state data privacy laws: Effective dates and thresholds

| **State and regulation** | **Effective date** | **Gross revenue threshold (USD)** | **Consumers whose personal data is processed annually (in state)** | **Data sale or sharing and/or other thresholds** |
| --- | --- | --- | --- | --- |
| California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) · [Overview](https://usercentrics.com/knowledge-hub/california-consumer-privacy-act/) · [Regulation text](https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5) | 1 January 2020 | $26.2M | 100,000 | Derives 50% or more of annual revenues from selling or sharing consumers' personal information |
| Colorado Privacy Act (CPA) · [Overview](https://usercentrics.com/knowledge-hub/colorado-privacy-act/) · [Regulation text](https://coag.gov/app/uploads/2022/01/SB-21-190-CPA_Final.pdf) | 1 July 2023 | N/A | 100,000 | Derives revenue or receives a discount on the price of goods or services from the sale of personal data and processes or controls the personal data of 25,000 or more consumers |
| Connecticut Data Privacy Act (CTDPA) · [Overview](https://usercentrics.com/knowledge-hub/connecticut-data-privacy-act-ctdpa/) · [Regulation text](https://www.cga.ct.gov/2024/sup/chap_743jj.htm) | 1 July 2023 | N/A | 35,000 | Derives more than 25% of gross revenue from sale of personal data and controls or processes personal data of not less than 25,000 consumers |
| Delaware Personal Data Privacy Act (DPDPA) · [Overview](https://usercentrics.com/knowledge-hub/delaware-digital-personal-data-protection-act-dpdpa/) · [Regulation text](https://delcode.delaware.gov/title6/c012d/index.html) | 1 January 2025 | N/A | 35,000 | Derives over 20% of gross revenue from sale of personal data and controls or processes personal data of not less than 10,000 consumers |
| Florida Digital Bill of Rights (FDBR) · [Overview](https://usercentrics.com/knowledge-hub/florida-digital-bill-of-rights-fdbr/) · [Regulation text](https://www.flsenate.gov/Session/Bill/2023/262/BillText/er/HTML) | 1 July 2024 | $1B (Plus one additional threshold) | N/A | Derives at least 50% of gross revenues from the sale of online ads, or operates a smart speaker with integrated virtual assistant, or operates an app store with at least 250,000 available apps |
| Indiana Consumer Data Protection Act (INCDPA) · [Overview](https://usercentrics.com/knowledge-hub/indiana-consumer-data-protection-act-incdpa/) · [Regulation text](https://iga.in.gov/laws/2024/ic/titles/24#24-15-1) | 1 January 2026 | N/A | 100,000 | Derives over 50% of gross revenue from sale of personal data and controls or processes personal data of at least 25,000 consumers |
| Iowa Consumer Data Protection Act (ICDPA) · [Overview](https://usercentrics.com/knowledge-hub/iowa-consumer-data-protection-act-icdpa/) · [Regulation text](https://www.legis.iowa.gov/legislation/BillBook?ga=90&ba=SF262) | 1 January 2025 | N/A | 100,000 | Derives over 50% of gross revenue from sale of personal data and controls or processes personal data of 25,000 or more consumers |
| Kentucky Consumer Data Protection Act (KCDPA) · [Overview](https://usercentrics.com/knowledge-hub/kentucky-consumer-data-protection-act-kcdpa/) · [Regulation text](https://apps.legislature.ky.gov/law/statutes/chapter.aspx?id=39092) | 1 January 2026 | N/A | 100,000 | Derives over 50% of gross revenue from sale of personal data and controls or processes personal data of at least 25,000 consumers |
| Maryland Online Data Privacy Act (MODPA) · [Overview](https://usercentrics.com/knowledge-hub/maryland-online-data-privacy-act-modpa/) · [Regulation text](https://mgaleg.maryland.gov/2024RS/chapters_noln/Ch_455_sb0541E.pdf) | 1 October 2025 | N/A | 35,000 | Derives more than 20% of gross revenue from sale of personal data and controls or processes personal data of not less than 10,000 consumers |
| Minnesota Consumer Data Privacy Act (MCDPA) · [Overview](https://usercentrics.com/knowledge-hub/minnesota-consumer-data-privacy-act-mcdpa/) · [Regulation text](https://www.revisor.mn.gov/laws/2024/0/Session+Law/Chapter/121/) | 31 July 2025 | N/A | 100,000 | Derives over 25% of gross revenue from sale of personal data and controls or processes personal data of 25,000 or more consumers |
| Montana Consumer Data Privacy Act (MTCDPA) · [Overview](https://usercentrics.com/knowledge-hub/montana-consumer-data-privacy-act-mtcdpa/) · [Regulation text](https://archive.legmt.gov/bills/mca/title_0300/chapter_0140/part_0280/sections_index.html) | 1 October 2024 | N/A | 25,000 | Derives more than 25% of gross revenue from sale of personal data and controls or processes personal data of not less than 25,000 consumers |
| Nebraska Data Privacy Act (NDPA) · [Overview](https://usercentrics.com/knowledge-hub/nebraska-data-privacy-act-ndpa/) · [Regulation text](https://nebraskalegislature.gov/FloorDocs/108/PDF/Slip/LB1074.pdf) | 1 January 2025 | N/A | N/A | Processes or engages in sale of personal data and is not a small business as defined by US Small Business Administration |
| New Hampshire Data Privacy Act (NHDPA) · [Overview](https://usercentrics.com/knowledge-hub/new-hampshire-data-privacy-act-nhpa/) · [Regulation text](https://gc.nh.gov/rsa/html/NHTOC/NHTOC-LII-507-H.htm) | 1 January 2025 | N/A | 35,000 | Derives more than 25% of gross revenue from sale of personal data and controls or processes personal data of not less than 10,000 consumers |
| New Jersey Privacy Act (NJDPA) · [Overview](https://usercentrics.com/knowledge-hub/new-jersey-data-privacy-act-njdpa/) · [Regulation text](https://pub.njleg.state.nj.us/Bills/2022/PL23/266_.HTM) | 15 January 2025 | N/A | 100,000 | Derives revenue or receives a discount on the price of goods or services from the sale of personal data and controls or processes personal data of 25,000 or more consumers |
| Oregon Consumer Privacy Act (OCPA) · [Overview](https://usercentrics.com/knowledge-hub/oregon-consumer-privacy-act-ocpa/) · [Regulation text](https://olis.oregonlegislature.gov/liz/2023R1/Downloads/MeasureDocument/SB619/Enrolled) | 1 July 2024 | N/A | 100,000 | Derives 25% or more of annual gross revenue from sale of personal data and controls or processes personal data of 25,000 or more consumers |
| Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA) · [Overview](https://usercentrics.com/knowledge-hub/rhode-island-data-transparency-and-privacy-protection-act-ridtppa/) · [Regulation text](https://webserver.rilegislature.gov/BillText24/HouseText24/H7787A.htm) | 1 January 2026 | N/A | 35,000 | Derives more than 20% of gross revenue from sale of personal data and controls or processes personal data of not less than 10,000 customers |
| Tennessee Information Protection Act (TIPA) · [Overview](https://usercentrics.com/knowledge-hub/tennessee-information-protection-act-tipa/) · [Regulation text](https://www.capitol.tn.gov/Bills/113/Bill/HB1181.pdf) | 1 July 2025 | $25M (Plus one additional threshold) | 175,000 | Derives over 50% of gross revenue from sale of personal data and controls or processes personal data of 25,000 or more consumers |
| Texas Data Privacy and Security Act (TDPSA) · [Overview](https://usercentrics.com/knowledge-hub/texas-data-privacy-and-security-act/) · [Regulation text](https://statutes.capitol.texas.gov/Docs/BC/htm/BC.541.htm#541.055) | 1 July 2024 | N/A | N/A | Processes or engages in sale of personal data and is not a small business as defined by US Small Business Administration |
| Utah Consumer Privacy Act (UCPA) · [Overview](https://usercentrics.com/knowledge-hub/utah-consumer-privacy-act-ucpa/) · [Regulation text](https://le.utah.gov/xcode/Title13/Chapter61/13-61.html?v=C13-61_2022050420231231) | 31 December 2023 | $25M (Plus one additional threshold) | 100,000 | Derives over 50% of gross revenue from sale of personal data and controls or processes personal data of 25,000 or more consumers |
| Virginia Consumer Data Protection Act (VCDPA) · [Overview](https://usercentrics.com/knowledge-hub/virginia-consumer-data-protection-act-vcdpa/) · [Regulation text](https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/) | 1 January 2023 | N/A | 100,000 | Derives over 50% of gross revenue from sale of personal data and controls or processes personal data of at least 25,000 consumers |

---

## Products
- [Usercentrics Web CMP](https://usercentrics.com/website-consent-management/)
- [Usercentrics App CMP](https://usercentrics.com/in-app-sdk/)
- [Usercentrics CTV CMP](https://usercentrics.com/usercentrics-ctv-cmp/)
- [Privacy Policy Generator](https://usercentrics.com/privacy-policy-generator/)
- [Server-side Tagging Solution](https://usercentrics.com/server-side-tracking-solution/)
- [Preference Manager](https://usercentrics.com/preference-management/)
- [Audience Unlocker](https://usercentrics.com/audience-unlocker/)
- [Integrations](https://usercentrics.com/integrations/)
- [Web Compliance Scan](https://usercentrics.com/privacy-compliance-scanner/)
- [App Compliance Scan](https://usercentrics.com/app-data-privacy-audit/)
- [ROAS Calculator](https://usercentrics.com/roas-calculator/)

## Solutions
- [Data Privacy Regulatory Compliance](https://usercentrics.com/data-privacy-regulatory-compliance/)
- [Marketing Performance Optimization](https://usercentrics.com/marketing-performance-optimization/)
- [Migration](https://usercentrics.com/migration/)
- [Media & Publishing](https://usercentrics.com/media-publishing/)
- [Retail & Ecommerce](https://usercentrics.com/retail-ecommerce/)
- [Banking, Finance & Insurance](https://usercentrics.com/banking-finance-insurance/)
- [Healthcare & Pharmaceuticals](https://usercentrics.com/healthcare-pharmaceuticals/)
- [Gaming](https://usercentrics.com/gaming/)
- [Education](https://usercentrics.com/education/)
- [Automotive](https://usercentrics.com/automotive/)
- [Travel & Hospitality](https://usercentrics.com/travel/)

## Regulations & Frameworks
- [GDPR (EU)](https://usercentrics.com/gdpr/)
- [GDPR (UK)](https://usercentrics.com/uk-gdpr/)
- [CCPA (California)](https://usercentrics.com/ccpa/)
- [TCF v2.3 (IAB)](https://usercentrics.com/cmp-for-publishers/)
- [DMA (EU)](https://usercentrics.com/digital-markets-act-dma/)
- [Amazon Consent Signal](https://usercentrics.com/usercentrics-cmp-and-amazon-consent-signal/)
- [Google Consent Mode (EU)](https://usercentrics.com/usercentrics-cmp-and-google-consent-mode-v2/)
- [Microsoft UET Consent Mode (EU)](https://usercentrics.com/usercentrics-cmp-and-microsoft-consent-mode/)
- [Microsoft Clarity Consent Mode](https://usercentrics.com/usercentrics-cmp-and-microsoft-clarity-consent-mode/)
- [View all regulations](https://usercentrics.com/regulations-and-frameworks/)

## Resources
- [Blog](https://usercentrics.com/knowledge-hub/)
- [Whitepapers](https://usercentrics.com/whitepapers/)
- [Checklists](https://usercentrics.com/checklists/)
- [Courses](https://courses.usercentrics.com/)
- [Case Studies](https://usercentrics.com/case-studies/)
- [Privacy-Led Marketing](https://usercentrics.com/privacy-led-marketing/)
- [Events](https://usercentrics.com/webinar/)
- [CONSENTED Podcast](https://usercentrics.com/consented/)
- [Guides](https://usercentrics.com/guides/)
- [Release Notes](https://releases.usercentrics.com/en)
- [Developer Documentation](https://usercentrics.com/docs/)
- [RFI Template](https://usercentrics.com/resources/usercentrics-rfi-template/)
- [Customer Directory](https://usercentrics.com/usercentrics-customer-directory/)

## Company
- [About Us](https://usercentrics.com/about-us/)
- [Press](https://usercentrics.com/press/)
- [Our Offices](https://usercentrics.com/contact/)
- [Trust Center](https://trust.usercentrics.com/)
- [Careers](https://usercentrics.com/career/)
- [Open Positions](https://apply.workable.com/usercentrics/)
- [Diversity & Inclusion](https://usercentrics.com/dei/)

## Support
- [General Support](https://support.usercentrics.com/hc/en-us)
- [Contact Sales](https://usercentrics.com/book-a-consultation/)
- [Technical Support](https://support.usercentrics.com/hc/en-us/requests/new)
- [Billing & Account](https://support.usercentrics.com/hc/en-us/categories/12253804608156-Account-and-billing)
- [Suggest a Feature](https://support.usercentrics.com/hc/en-us/requests/new?ticket_form_id=10610312381340)
- [Partner Login](https://partnerportal.usercentrics.com/)
- [Partner Program](https://usercentrics.com/partner-program-overview/)
- [Affiliate Program](https://usercentrics.com/affiliates/)

## Legal
- [Terms & Conditions](https://usercentrics.com/terms-and-conditions/)
- [Terms & Conditions USA](https://usercentrics.com/terms-and-conditions-usa/)
- [Privacy Policy](https://usercentrics.com/privacy-policy/)
- [Legal Notice](https://usercentrics.com/legal-notice/)
- [Legal Documents](https://usercentrics.com/legal-documents/)
- [Accessibility Statement](https://usercentrics.com/accessibility-statement-wcag-compliance/)

© 2026 Usercentrics GmbH