Tracks US state privacy laws across 50 states, DC, territories: enacted laws (CCPA/CPRA, VCDPA, CPA, etc.), pending bills, effective dates, enforcers, thresholds, rights differences. For multi-state compliance.
npx claudepluginhub mukul975/privacy-data-protection-skills --plugin privacy-skills-completeThis skill uses the workspace's default tool permissions.
The United States does not have a single comprehensive federal privacy law. Instead, a patchwork of state-level comprehensive privacy statutes has emerged since the California Consumer Privacy Act (CCPA) was enacted in 2018. As of early 2026, twenty states have enacted comprehensive consumer privacy laws, with additional states introducing legislation in each legislative session. This skill tra...
Conducts multi-round deep research on GitHub repos via API and web searches, generating markdown reports with executive summaries, timelines, metrics, and Mermaid diagrams.
Dynamically discovers and combines enabled skills into cohesive, unexpected delightful experiences like interactive HTML or themed artifacts. Activates on 'surprise me', inspiration, or boredom cues.
Generates images from structured JSON prompts via Python script execution. Supports reference images and aspect ratios for characters, scenes, products, visuals.
The United States does not have a single comprehensive federal privacy law. Instead, a patchwork of state-level comprehensive privacy statutes has emerged since the California Consumer Privacy Act (CCPA) was enacted in 2018. As of early 2026, twenty states have enacted comprehensive consumer privacy laws, with additional states introducing legislation in each legislative session. This skill tracks the status of enacted laws, key provisions, effective dates, and substantive differences that drive multi-state compliance obligations.
| State | Law | Enacted | Effective | Enforcer |
|---|---|---|---|---|
| California | CCPA/CPRA | 2018/2020 | 1 Jan 2020 / 1 Jan 2023 | CPPA + AG |
| Virginia | VCDPA | 2021 | 1 Jan 2023 | AG |
| Colorado | CPA | 2021 | 1 Jul 2023 | AG |
| Connecticut | CTDPA | 2022 | 1 Jul 2023 | AG |
| Utah | UCPA | 2022 | 31 Dec 2023 | AG |
| Iowa | ICDPA | 2023 | 1 Jan 2025 | AG |
| Indiana | INCDPA | 2023 | 1 Jan 2026 | AG |
| Tennessee | TIPA | 2023 | 1 Jul 2025 | AG |
| Montana | MCDPA | 2023 | 1 Oct 2024 | AG |
| Texas | TDPSA | 2023 | 1 Jul 2024 | AG |
| Oregon | OCPA | 2023 | 1 Jul 2024 | AG |
| Delaware | DPDPA | 2023 | 1 Jan 2025 | AG |
| New Hampshire | NHPA | 2024 | 1 Jan 2025 | AG |
| New Jersey | NJDPA | 2024 | 15 Jan 2025 | AG |
| Nebraska | NDPA | 2024 | 1 Jan 2025 | AG |
| Minnesota | MCDPA | 2024 | 31 Jul 2025 | AG |
| Maryland | MODPA | 2024 | 1 Oct 2025 | AG |
| Rhode Island | RIDPA | 2024 | 1 Jan 2026 | AG |
| Kentucky | KCDPA | 2024 | 1 Jan 2026 | AG |
| Vermont | VDPA | 2024 | 1 Jul 2025 | AG |
States differ in what triggers applicability:
| Right | CA | VA | CO | CT | TX | OR | NJ | MD |
|---|---|---|---|---|---|---|---|---|
| Access | Y | Y | Y | Y | Y | Y | Y | Y |
| Delete | Y | Y | Y | Y | Y | Y | Y | Y |
| Correct | Y | Y | Y | Y | Y | Y | Y | Y |
| Portability | Y | Y | Y | Y | Y | Y | Y | Y |
| Opt-out of sale | Y | Y | Y | Y | Y | Y | Y | Y |
| Opt-out of targeted ads | Y | Y | Y | Y | Y | Y | Y | Y |
| Opt-out of profiling | N* | Y | Y | Y | Y | Y | Y | Y |
| Appeal right | N | Y | Y | Y | Y | Y | Y | Y |
| Private right of action | Y** | N | N | N | N | N | N | N |
*California CPRA provides limited automated decision-making rights via regulations **California PRA limited to data breaches involving specified personal information
States increasingly recognise universal opt-out signals:
This tracker is updated by reviewing: