An Act providing for consumer data privacy, for duties of controllers and for duties of processors; and imposing penalties.

Pennsylvania Consumer Data Privacy Act

To date, 20 states have passed data privacy laws in the U.S. Other states have also introduced bills to keep up with the data privacy race.

CCPA (California Consumer Privacy Act) went into effect more than five years ago. I was in grad school when this legislation was signed into law. I distinctly remember being hopeful that it would be a good model that could be adopted at the federal level. Fast forward to 2025 and I am not actually surprised that this remains at the state level and has that classic patchwork approach vibe.