This chart, published by Thompson Hine, outlines the range of data protection rights and obligations under U.S. state data protection laws that go into effect in 2023. These requirements include how individuals can opt out from having their personal data used for targeted advertising or sold to third parties. Each state law has different compliance frameworks for how covered businesses must allow consumers to exercise these rights. The state laws covered in this chart are:

• The California Privacy Rights Act of 2020 (CPRA)
• The Colorado Privacy Act (CPA)
• The Connecticut Data Privacy Act (CDPA)
• Utah Consumer Privacy Act (UCPA)
• Virginia Consumer Data Protection Act (VCDPA)