The welcome trend toward laws regulating online consumer privacy continues into 2024 with new laws being proposed, and those already passed taking effect. Here is a brief rundown of what to expect as we enter the New Year.

States With New Privacy Laws


The state that set the standard for online privacy protection continues to bolster existing statutes with new restrictions.

January 1 started the clock ticking on the requirement for data brokers to register with the California Privacy Protection Agency (CPPA) instead of the California Attorney General’s Office. The Delete Act, passed last year, compels them to register by the end of January. By July 1, data brokers must collect and report information in their privacy policy regarding certain types of California Consumer Privacy Act (CCPA) requests that they have received.


This is the year that the Colorado Privacy Act goes into effect. Beginning on July 1, organizations that fall within the CPA’s application thresholds must allow consumers to opt-out of the sale of their personal data or use of their personal data for targeted advertising, using a Universal Opt-Out Mechanism (UOOM). More information about the UDOM can be found here.


Connecticut was the first state to approve a Children’s Privacy Law that offers additional privacy protections for children 13 to 17 years of age. It will take effect in October of this year.


The Montana Consumer Data Privacy Act goes into effect on October 1. As with other privacy laws it provides a universal opt-out mechanism, as well as additional privacy rights for children.


Data brokers in Oregon must register with the state’s Department of Consumer and Business services as of January 1. And thanks to the Oregon Consumer Privacy Act, residents can now obtain a list of specific third parties, other than natural persons, to which their personal data has been disclosed.


The Texas Data Privacy and Security Act takes effect on July 1 of this year. It is similar  to laws passed in other states but is primarily modeled after the Virginia version.


If you don’t see your state listed here, there may still be statutes in place to protect your online privacy. Visit our Privacy Laws by State page to find out more. And even where a specific law does not yet exist, IronWall360 has been able to work with data brokers and other entities to protect our clients by removing their home address and other personal information.

I want to be protected


Ron Zayas


Ron Zayas is an online privacy expert, speaker, author, and CEO of 360Civic, a provider of online protection to law enforcement, judicial officers, and social workers. For more insight into onli... Read more

Ready to Protect Your Organization?

Request a Quote