State Enactment of Comprehensive Privacy Legislation: New Jersey, New Hampshire, and Kentucky Lead the Way in 2024

States across the U.S. are taking significant steps to protect consumer privacy and regulate the handling of personal data. In 2024, New Jersey, New Hampshire, and Kentucky have emerged as leaders in this effort by enacting comprehensive privacy legislation.

New Jersey Governor Phil Murphy signed the New Jersey Data Protection Act into law on January 16, 2024, making it the first state to implement a comprehensive privacy law this year. This Act applies to businesses that handle the personal data of a significant number of consumers, setting clear guidelines for data protection and privacy practices.

Similarly, New Hampshire’s Senate Bill 255, signed into law by Governor Chris Sununu on March 6, 2024, and Kentucky’s HB 586, signed by Governor Andy Beshear on April 4, 2024, establish regulations for organizations handling personal data, ensuring greater control and transparency for individuals.

These state laws outline specific consumer privacy rights, such as the right to correct inaccuracies in personal data, delete data under certain circumstances, and opt out of targeted advertising. Controllers are also required to implement data security practices, conduct assessments, and provide privacy notices to consumers.

While there are exceptions for certain entities and types of data, the overall goal of these laws is to provide a framework for businesses and organizations to protect personal information and empower individuals to control their data privacy.

Businesses operating in these states must take proactive measures to comply with these laws, including understanding their obligations as data controllers, implementing robust security measures, and being transparent about how they handle personal data. By adhering to these guidelines, companies can ensure they are safeguarding consumer privacy and upholding data protection standards in an increasingly digital world.