The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulations library Regulatory Watch US state map Compare laws

102laws explained

24US states with a privacy law

5coming into force

94in force today

Topic Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers

Status In force Coming into force Challenged or stayed Clear filters

Texas

State laws below. Federal laws such as HIPAA, COPPA and the FTC Act apply in every state: see US federal.

US states 3

TDPSA

Texas

In force

No revenue or volume threshold: it reaches almost every business that is not a small business, which makes it one of the broadest state laws in practice.

Since Jul 1, 2024 Guide in progress

CUBI

Texas

In force

Notice and consent before capturing biometric identifiers, limits on sale and disclosure, and destruction within a set period. Enforced by the Attorney General, which has obtained large settlements.

Since Sep 1, 2009

Texas data broker law

Texas

In force

Registration, website notices and a security program for data brokers.

Since Sep 1, 2023

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.