Five states set to enhance consumer data privacy protections in 2025

Starting January 1, 2025, five states—Delaware, Iowa, Nebraska, New Hampshire, and New Jersey—will implement new consumer data privacy laws. This will increase the total number of states with active privacy laws from eight to 13. Delaware's law applies to organizations processing personal data of 35,000 residents or more, granting rights to access, correct, and delete data. Iowa's law is more limited, allowing access and deletion but not correction or opting out of targeted advertising. Nebraska's law covers all non-small businesses, allowing consumers to access, correct, and delete their data. New Hampshire's law is similar to Delaware's, while New Jersey's law introduces a universal opt-out mechanism for consumers.