Background

With states passing inconsistent laws and no uniform federal law addressing data privacy, there’s a patchwork of rules for companies to comply with. ALTA is dedicated to helping its members understand what they need to do to comply, if required, with data privacy laws.

ALTA Policy Position

ALTA believes any comprehensive data privacy legislation should include a full entity exemption for entities subject to the Gramm-Leach-Bliley Act (GLBA). Since 1999, this federal law has strictly limited financial institutions’ use and sharing of customers’ personal information. Additionally, financial institutions are required to assure the security of this information and provide comprehensive disclosures to consumers.

 

Data Privacy Principles

Resources

 

 

State Data Privacy Laws

States that have Enacted Data Privacy Legislation

Click on any enacted state for links. Click "x" to close.


Data Privacy Articles

Recent 2024 2023 2022 2021 2020 2019

 California Updates Definition of Sensitive Information Under Consumer Privacy Act
December 14, 2023

A revision to the California Consumer Privacy Act (CCPA) definition of sensitive personal information that now includes a consumer's citizenship or immigration status went into effect Jan. 1, 2024.

 California Court Delays Enforcement of Certain Privacy Rules
August 3, 2023

On June 30, the Sacramento County Superior Court issued a decision to delay enforcement of the California Privacy Rights Act (CPRA) regulations until March 29, 2024. Read on for the key takeaways from the ruling.

 Oregon Joins Growing List of States to Pass Comprehensive Data Privacy Law
July 27, 2023

Oregon’s legislation, which goes into effect July 1, 2024, is modeled on the Virginia Consumer Data Protection Act (VCDPA) and contains an exemption to personal data subject to the Gramm-Leach-Bliley Act.

Delaware Passes Comprehensive Privacy Law
July 11, 2023

On June 30, the Delaware legislature passed the Personal Data Privacy Act. The bill, which awaits the governor’s signature, goes into effect Jan. 1, 2025. 

 Four States Pass Comprehensive Data Privacy Laws
April 27, 2023

Four states—Indiana, Iowa, Montana and Tennessee—recently passed comprehensive data privacy laws this year. All the bills contain a Gramm-Leach Bliley Act (GLBA) exemption, which ALTA has supported.