The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulations library Regulatory Watch US state map Compare laws

102laws explained

24US states with a privacy law

5coming into force

94in force today

Topic Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers

Status In force Coming into force Challenged or stayed Clear filters

US states 5

OCDPA

Oklahoma

Enacted, not yet in force

Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.

From Jan 1, 2027

LDPA

Louisiana

Enacted, not yet in force

Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.

From Jan 1, 2027

APDPA

Alabama

Enacted, not yet in force

Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.

From May 1, 2027

VDPOSA

Vermont

Enacted, not yet in force

Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.

From Jan 1, 2028

SAFE for Kids Act

New York

Enacted, not yet in force

Limits addictive algorithmic feeds and overnight notifications for minors without parental consent.

From Jan 25, 2027

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.