Explore. Learn. Grow.

The Alabama Personal Data Protection Act (APDPA), enacted through HB 351 in April 2026, establishes consumer rights over personal data and corresponding obligations for businesses processing data of Alabama residents. The law takes effect May 1, 2027 and includes notable distinctions around its applicability thresholds, sale definition, consent revocation, teen data protections, and cure period.

The Oklahoma Consumer Data Privacy Act takes effect January 1, 2027, bringing opt-out requirements for data sales and targeted advertising, affirmative consent for sensitive data, and AG-only enforcement with a permanent cure period. Oklahoma’s obligations closely track Virginia and Texas frameworks—but its narrower “sale” definition and absence of GPC support create specific operational considerations to address before the effective date.

The California Privacy Protection Agency, now publicly known as CalPrivacy, is California’s privacy watchdog. The Agency has broad powers to audit businesses, enforce privacy law, and shape regulations. This article explains what it does, why it matters, and what businesses need to know to avoid penalties and fines as enforcement ramps up.