Starting January 1, California’s Privacy Rights Act and Virginia’s Consumer Data Protection Act went into effect. Colorado and Connecticut’s go into effect July 1, and Utah’s goes into effect on the last day of this year, December 31.

Data privacy laws are different from data breach notifications laws, which are already in effect in all of the United States. Data breach notification laws apply when there is a data breach. Data privacy laws apply to inform individuals of what businesses do with their personal information and to give them rights to control it.