{"id":437,"date":"2023-12-28T11:11:17","date_gmt":"2023-12-28T10:11:17","guid":{"rendered":"https:\/\/stage.usercentrics.com\/?post_type=knowledge&p=32644"},"modified":"2026-03-24T16:50:22","modified_gmt":"2026-03-24T15:50:22","slug":"review-of-2023-in-data-privacy-around-the-world","status":"publish","type":"knowledge","link":"https:\/\/usercentrics.com\/us\/knowledge-hub\/review-of-2023-in-data-privacy-around-the-world\/","title":{"rendered":"Review of 2023 in data privacy around the world"},"content":{"rendered":"

Data privacy definitely ramped up globally in 2023. More regulations were passed, and consumers continued to become more savvy and concerned about access to and use of their personal data. The app industry<\/a> started to take notice and realize that privacy compliance wasn\u2019t an onerous legal requirement, but a potentially massive revenue opportunity.<\/p>\n

Perhaps most of note, however, is that impetus to achieve privacy compliance has started to shift and a greater push is coming not from governments, but from businesses. Laws like the Digital Markets Act (DMA)<\/a> will affect big tech companies like Alphabet, Facebook and Amazon.<\/p>\n

Millions of businesses use those companies\u2019 platforms and services to sell products, collect user data, advertise, and more. If the big tech companies are required to comply with DMA obligations, they will require third parties that rely on them for reach and revenue to comply as well. This hits a lot closer to home than, for example, headlines about \u201cThe Biggest GDPR Fine Ever!\u201d<\/p>\n

AI has also been an ever-present topic in 2023, with reactions running the full gamut from giddy excitement to alarmist. It\u2019s been good to see that people seem to be aware of and talking about the data privacy issues of AI training, particularly, and laws to regulate AI development and use are already in the works. The EU should have their AI Act finalized in early 2024.<\/p>\n

Let\u2019s have a look at what was new and in the news in data privacy in 2023.<\/p>\n\n\n

2023 in data privacy regulations and business<\/h2>\n\n\n

This year several long-awaited data privacy regulations came into effect, and many were passed that will come into force in the coming years. 2024 looks to become an even bigger year for regulation and enforcement, accompanied by increasing B2B expectations of businesses for their partners and customers.<\/p>\n

Laws targeting big tech also got a lot of attention, and it will be very interesting to see how that plays out in the market and their effects on competition and innovation. Regulation of AI, which also brings significant data privacy concerns, will also continue to grow.<\/p>\n

Let\u2019s look at where new privacy laws were passed in 2023.<\/p>\n

Data privacy in the United States<\/h4>\n

The United States passed more data privacy laws than any other country in 2023, but that\u2019s because they are still passed state by state. To date the country still doesn\u2019t have a federal-level data privacy law. 14 states of 50 (there\u2019s also the District of Columbia, Puerto Rico, etc.) have now passed data privacy legislation.<\/p>\n

California is the only state with two active laws, the California Consumer Privacy Act (CCPA)<\/a> having come into effect in 2020 and the California Privacy Rights Act (CPRA)<\/a> having come into effect in 2023.<\/p>\n

40 US states introduced privacy legislation in 2023. In many cases these were repeat attempts. Eight states actually passed new data privacy laws, which their respective governors signed into law:<\/p>\n