State Consumer Privacy Law Wave

Multiple U.

S. states are enacting or advancing comprehensive consumer privacy laws with similar core rights: access, deletion, correction, portability, and opt-outs for targeted advertising and data sale. Oklahoma and Alabama are the main current examples, both using attorney general enforcement, cure periods, and broad exemptions that limit how disruptive the laws may be in practice. The cluster also shows ongoing debate over how strong these laws really are, especially around universal opt-out signals, private rights of action, and narrow sale definitions. A federal privacy bill has also been introduced, but the signal remains dominated by state-level lawmaking rather than national standard-setting.