# Privacy Rights Comparison Tool

> Free interactive tool comparing consumer data privacy rights across all 22 US states with enacted comprehensive privacy laws. Part of the ComplianceHub.wiki ecosystem. Updated May 2026.

This tool helps privacy professionals, compliance teams, legal researchers, and consumers understand their rights under US state privacy law. It tracks 21 consumer rights including emerging AI rights, neural data protections, biometric consent, and enhanced teen consent requirements — with A–F privacy grades, CSV export, and side-by-side comparison.

## Tool

- [Privacy Rights Comparison](https://privacyrights.compliancehub.wiki/): Main interface — 22 states × 21 rights with filters, privacy grades (A–F), CSV export, and side-by-side comparison mode

## Related ComplianceHub Tools

- [PII Navigator](https://pii.compliancehub.wiki/): Personal identifiable information classification and data mapping
- [Biometric Laws](https://biometric.myprivacy.blog/): State biometric data regulation tracker — BIPA, CUBI, and state biometric privacy acts
- [Children's Privacy Laws](https://childrenprivacylaws.com/): Children's and teen online privacy law tracker — COPPA, state age-appropriate design codes, KOSA
- [Breach Notifications](https://notification.breached.company/): State breach notification requirements and timelines
- [Global Privacy Map](https://globalcompliancemap.com/): International privacy law comparison — GDPR, LGPD, PIPEDA, PDPA

## Optional

## States with Enacted Comprehensive Privacy Laws (22 — May 2026)

| # | State | Law | Effective |
|---|-------|-----|-----------|
| 1 | California | CPRA | Jan 1, 2023 |
| 2 | Virginia | VCDPA | Jan 1, 2023 |
| 3 | Colorado | CPA + AI Act (blocked) | Jul 1, 2023 |
| 4 | Connecticut | CTDPA | Jul 1, 2023 |
| 5 | Utah | UCPA | Dec 31, 2023 |
| 6 | Montana | MCDPA | Oct 1, 2024 |
| 7 | Oregon | OCPA | Jul 1, 2024 |
| 8 | Texas | TDPSA + AI Governance Act | Jul 1, 2024 |
| 9 | Florida | FDBR | Jul 1, 2024 |
| 10 | Delaware | DPDPA | Jan 1, 2025 |
| 11 | Iowa | ICDPA | Jan 1, 2025 |
| 12 | Nebraska | NDPA | Jan 1, 2025 |
| 13 | New Hampshire | NH Privacy Act | Jan 1, 2025 |
| 14 | New Jersey | NJDPA | Jan 15, 2025 |
| 15 | Tennessee | TIPA | Jul 1, 2025 |
| 16 | Maryland | MODPA | Oct 1, 2025 |
| 17 | Minnesota | MCDPA | Jul 31, 2025 |
| 18 | Indiana | ICDPA | Jan 1, 2026 |
| 19 | Kentucky | KCDPA | Jan 1, 2026 |
| 20 | Rhode Island | RI Data Transparency Act | Jan 1, 2026 |
| 21 | Oklahoma | OCDPA | Jan 1, 2027 (enacted Mar 20, 2026) |
| 22 | Alabama | APDPA | May 1, 2027 (enacted Apr 16, 2026) |

## Consumer Rights Tracked (21 Total)

### Core Rights (15)
Right to Know · Right to Access · Right to Obtain List of Third Parties · Right to Data Portability · Right to Delete · Right to Correct Inaccuracies · Right Not to Be Discriminated Against · Right to Opt-Out of Sale · Right to Opt-Out of Targeted Advertising/Sharing · Right to Opt-Out of Certain Types of Profiling · Right to Opt-Out of ADMT · Right to Recognize Opt-Out Signals (UOOM) · Right to Revoke Consent · Right Not to Have Data Processed in Discriminatory Manner · Right to Appeal

### AI & Automated Decision Rights (3)
Right to Notice of High-Risk AI Use (Colorado AI Act — currently court-stayed) · Right to Explanation of Automated Decision (CT Jul 2026, MN; CO blocked) · Right to Human Review of Automated Decisions (MN; CO blocked)

### Sensitive & Specialized Rights (3)
Right to Limit Use/Disclosure of Sensitive Information (CA, MD) · Neural/Biometric Data Protections (CA, CO, CT, MT; TX biometric consent required per HB 149) · Enhanced Teen Consent Rights ages 13-17 (CT from Jul 2026, FL, MD, MN, NJ, OR under-16)

## Key 2026 Updates

- **Oklahoma** becomes State #21: OCDPA enacted March 20, 2026, effective January 1, 2027
- **Alabama** is State #22: APDPA enacted April 16, 2026, effective May 1, 2027
- **Colorado AI Act BLOCKED**: Federal court stay issued April 27, 2026 (xAI constitutional challenge, DOJ intervened). AG not enforcing — AI rights marked Unclear.
- **Indiana, Kentucky, Rhode Island**: Now active since January 1, 2026
- **Texas HB 149**: Biometric consent now required (effective January 1, 2026)
- **California ADMT**: Rules finalized; business compliance required January 1, 2027
- **Connecticut**: Major amendments effective July 1, 2026 — threshold drops to 35,000, teen ad ban, profiling rights
- **Oregon**: Under-16 data sale prohibited (teen consent partial)
- **Utah**: Full correction right effective July 1, 2026 (Utah Digital Choice Act)
- **Connecticut AI Bill (SB 5)**: Companion chatbot rules, employment AI transparency — governor expected to sign May 2026

## States That Failed to Pass Comprehensive Privacy Laws (2025–2026)

Georgia (SB 111) — Failed. Illinois (SB 52) — Failed. Massachusetts (S2619) — Senate only, not enacted.

## Biometric Data Laws (tracked separately at biometric.myprivacy.blog)

Illinois BIPA (strongest private right of action), Texas CUBI, Washington HB 1493, New York NYC Local Law 144 (employment AI bias audits), Texas HB 149 (2026 biometric consent). See https://biometric.myprivacy.blog/ for full biometric law comparison.

## Children's Privacy Laws (tracked separately at childrenprivacylaws.com)

COPPA (federal, under 13), COPPA 2.0 (Senate passed March 2026, awaiting House), KOSA (Kids Online Safety Act), California Age-Appropriate Design Code, Maryland Kids Code, Florida Digital Bill of Rights (under-18 definition), Minnesota/New Jersey/Connecticut teen protections. See https://childrenprivacylaws.com/ for dedicated children's privacy tracker.

## Privacy Grade Methodology

Each state scored 0–100% based on breadth of consumer rights (full = 2 pts, partial = 1 pt, none = 0 pts across 21 rights). Grade: A (85%+), B (70–84%), C (55–69%), D (40–54%), F (<40%).

## Disclaimer

For informational purposes only. Does not constitute legal advice. Consult a qualified attorney for compliance guidance. Data compiled from state legislation, Attorney General guidance, and legal expert analysis.

## Publisher

ComplianceHub.wiki · info@quantumsecurity.ai · https://privacyrights.compliancehub.wiki/