The United States is witnessing a surge in state-level data privacy laws, with 20 states adopting varying consent requirements based on data types and processing activities. These laws generally fall into two models: opt-in consent, requiring explicit consumer permission before data collection, and opt-out consent, where data collection is default unless consumers opt out. Sensitive data and activities like targeted advertising are subject to stricter rules. The variations among state laws pose challenges for businesses operating across states, increasing compliance burdens and potentially leading to consumer confusion.
Source: Reuters – The privacy tug-of-war: States grappling with divergent consent standards
