Authors: Gary Kibel of Davis+Gilbert and Jeremy Merkel of Davis+Gilbert
The Bottom Line
- Privacy compliance obligations continue to grow and expand, so businesses should revisit their privacy compliance programs regularly.
- California has introduced even more unique privacy compliance obligations.
- Kentucky, Indiana and Rhode Island join the fray of states with effective comprehensive consumer privacy laws on January 1, 2026.
The new year might mean the same to you, but for businesses, the turn of the calendar once again means a new set of privacy compliance obligations. 2026 brings new requirements in California, which has the most comprehensive regulatory framework and a stand-alone privacy regulatory agency, along with new state privacy laws in Kentucky, Indiana and Rhode Island taking effect.