Consumer Privacy: children's privacy and online safety laws
22 consumer privacy laws tracked for Consumer Privacy: Arkansas Children and Teens' Online Privacy Protection Act (HB 1717), California Consumer Privacy Act (CCPA), California Mental Health Warnings (AB 56), Colorado Privacy Act (Minors Amendments), Connecticut Data Privacy Act (Children's Privacy A
| Law | Jurisdiction | Category | Status | Effective |
|---|---|---|---|---|
| Arkansas Children and Teens' Online Privacy Protection Act (HB 1717) | Arkansas | Consumer Privacy | active | July 1, 2026 |
| California Consumer Privacy Act (CCPA) | California | Consumer Privacy | active | September 2025 |
| California Mental Health Warnings (AB 56) | California | Consumer Privacy | pending | January 1, 2027 |
| Colorado Privacy Act (Minors Amendments) | Colorado | Consumer Privacy | active | October 1, 2025 |
| Connecticut Data Privacy Act (Children's Privacy Amendments) | Connecticut | Consumer Privacy | active | October 1, 2025; Phase 2 July 1, 2026 |
| Delaware Personal Data Privacy Act | Delaware | Consumer Privacy | active | January 1, 2025 |
| Indiana Consumer Data Protection Act | Indiana | Consumer Privacy | active | January 1, 2026 |
| Iowa Consumer Data Protection Act | Iowa | Consumer Privacy | active | January 1, 2025 |
| Kentucky Consumer Data Protection Act | Kentucky | Consumer Privacy | active | January 1, 2026 |
| Louisiana Kids Online Protection & Anti-Grooming Act Amendments (HB 427 / Act 552) | Louisiana | Consumer Privacy | pending | January 1, 2027 |
| Maryland Online Data Privacy Act | Maryland | Consumer Privacy | active | October 1, 2025 |
| Minnesota Consumer Data Privacy Act | Minnesota | Consumer Privacy | active | July 31, 2025 |
| Montana Data Privacy Act (Children's Privacy Amendments) | Montana | Consumer Privacy | active | October 1, 2025 |
| Nebraska Data Privacy Act & AADC (LB 504) | Nebraska | Consumer Privacy | active | January 1, 2026 (amended July 17, 2026) |
| New Hampshire Privacy Act | New Hampshire | Consumer Privacy | active | January 1, 2025 |
| New Jersey Data Privacy Act | New Jersey | Consumer Privacy | active | January 15, 2025 |
| New York Child Data Protection Act | New York | Consumer Privacy | active | June 20, 2025 |
| Oregon Consumer Privacy Act (Minors Amendments) | Oregon | Consumer Privacy | active | January 1, 2026 |
| Rhode Island Data Transparency and Privacy Protection Act | Rhode Island | Consumer Privacy | active | January 1, 2026 |
| Tennessee Information Protection Act | Tennessee | Consumer Privacy | active | July 1, 2025 |
| Vermont Age-Appropriate Design Code Act | Vermont | Consumer Privacy | pending | January 1, 2027 |
| Virginia Consumer Data Privacy Act | Virginia | Consumer Privacy | active | January 1, 2025 |
Frequently asked
Which children's privacy laws apply in Consumer Privacy?
Arkansas Children and Teens' Online Privacy Protection Act (HB 1717) (active, effective July 1, 2026); California Consumer Privacy Act (CCPA) (active, effective September 2025); California Mental Health Warnings (AB 56) (pending, effective January 1, 2027); Colorado Privacy Act (Minors Amendments) (active, effective October 1, 2025); Connecticut Data Privacy Act (Children's Privacy Amendments) (active, effective October 1, 2025; Phase 2 July 1, 2026); Delaware Personal Data Privacy Act (active, effective January 1, 2025); Indiana Consumer Data Protection Act (active, effective January 1, 2026); Iowa Consumer Data Protection Act (active, effective January 1, 2025); Kentucky Consumer Data Protection Act (active, effective January 1, 2026); Louisiana Kids Online Protection & Anti-Grooming Act Amendments (HB 427 / Act 552) (pending, effective January 1, 2027); Maryland Online Data Privacy Act (active, effective October 1, 2025); Minnesota Consumer Data Privacy Act (active, effective July 31, 2025); Montana Data Privacy Act (Children's Privacy Amendments) (active, effective October 1, 2025); Nebraska Data Privacy Act & AADC (LB 504) (active, effective January 1, 2026 (amended July 17, 2026)); New Hampshire Privacy Act (active, effective January 1, 2025); New Jersey Data Privacy Act (active, effective January 15, 2025); New York Child Data Protection Act (active, effective June 20, 2025); Oregon Consumer Privacy Act (Minors Amendments) (active, effective January 1, 2026); Rhode Island Data Transparency and Privacy Protection Act (active, effective January 1, 2026); Tennessee Information Protection Act (active, effective July 1, 2025); Vermont Age-Appropriate Design Code Act (pending, effective January 1, 2027); Virginia Consumer Data Privacy Act (active, effective January 1, 2025)
Put it into practice
- Generate the policy: GDPR policy generator (generatepolicy.com)
- Buy the policy pack: Privacy Program Bundle (cyberpolicy.shop)
- Build it yourself: Privacy Dual Coverage Bundle (ciso.diy)