State Privacy Law Changes in 2027
The entries below are a selected list of enacted changes with official primary or agency sources; they are not a complete state privacy-law survey.
Last reviewed 2026-10-18. Confirm current coverage and exceptions with the official source.
California SB 923: deletion requests
California's Expanding Privacy Rights Act amends the CCPA deletion right and adds an online submission method for certain online-only businesses. The California Privacy Protection Agency says it takes effect January 1, 2027.
Effective date: 2027-01-01
Delaware HB 380: Personal Data Privacy Act amendments
Delaware's enacted HB 380 amends the Delaware Personal Data Privacy Act. The official bill detail page lists an effective date of January 1, 2027.
Effective date: 2027-01-01
Oklahoma SB 546: consumer data privacy
Oklahoma's enrolled SB 546 establishes consumer privacy rights, appeal procedures, privacy notices, data-protection assessments, and penalties. The enrolled bill states an effective date of January 1, 2027.
Effective date: 2027-01-01