Data privacy laws by state (2026)
The patchwork of US state privacy laws means your rights depend on where you live. This directory covers all 50 states and D.C. — what law applies, what rights you have, and what you can do regardless.
Broker registry states
These states require data brokers to register with a state agency, creating transparency and accountability. California's DELETE Act also provides a free one-click deletion portal (DROP).
Comprehensive privacy law states
These states have enacted comprehensive consumer data privacy laws granting residents rights to access, delete, correct, and opt out of sale of their personal data. No broker registry requirement.
States without comprehensive laws
These 29 states (plus D.C.) have no comprehensive data privacy law in effect. All have breach notification laws. Residents can still use CCPA-backed opt-outs and the Global Privacy Control against most national brokers. Read the full guide →
Your rights vary. Your options do not.
Regardless of where you live, a free scan shows which data brokers have your personal information. Removal works under federal and cross-state rights.
Run a free scan →