Stay ahead of new privacy laws with the Syrenis US State Legislation Tracker. See what’s changing
US state privacy legislation tracker
Select a state
Colour the map by legislative status or by when the law takes effect. Click a legend entry to isolate one group.
Recommended resources
Guides, templates and analysis on the states above.
The 2026 Privacy Playbook: What's changed, what's next, and what companies need to do now
Privacy regulations are evolving, but keeping up with new laws is only part of the challenge. In The 2026 Privacy Playbook, Jodi Daniels, Founder and CEO of Red Clover Advisors, and Morgan Woodbury, VP of Enterprise Sales at Syrenis, explore what’s changed across the US privacy landscape, what’s coming next, and what it means for businesses in practice.
DownloadHow to build audit-ready CCPA compliance across enterprise systems
Audit-ready CCPA compliance” is an operational standard. In an enterprise environment, you can be “compliant on paper” and still fail the moment an auditor, regulator, or internal risk team asks for evidence that controls are working across real systems – from websites, apps, call centers and CRM, to ad tech, data pipelines, customer data platforms and third parties.
ReadProving Compliance with the Updated CCPA Regulations
Updated CCPA regulations have increased the pressure on organizations to demonstrate not just policy, but execution when it comes to consent and preference management. This guide explores what demonstrable compliance looks like across consent capture, downstream enforcement, governance, reporting, and audit readiness.
DownloadThe State Laws Regulating Collection of Health and Fitness Data
The rise of health and fitness tracking apps has led to the collection of vast amounts of personal data, including height, weight, heart rate, blood pressure, sleep patterns, calorie intake, and sensitive health data like menstrual cycles and medical conditions. Many consumers mistakenly believe that their data is protected under HIPAA, but this is often not the case.
ReadThe Do’s & Don’ts of Selecting a Consent Management Platform
Choosing a Consent Management Platform (CMP) is a big step in an organization’s privacy journey. Organizations facing this step often have reached one or more tipping points – multiple websites and apps, an increase in the number of applicable jurisdictions, a business need to collect and use more data, and/or a business need to increase the granularity and sophistication of data use.
ReadHow to build audit-ready CCPA compliance across enterprise systems
Audit-ready CCPA compliance” is an operational standard. In an enterprise environment, you can be “compliant on paper” and still fail the moment an auditor, regulator, or internal risk team asks for evidence that controls are working across real systems – from websites, apps, call centers and CRM, to ad tech, data pipelines, customer data platforms and third parties.
ReadConsent is infrastructure, not a banner.
Twenty-three statutes, four commencement dates still ahead, and no two definitions of sensitive data that match. The Syrenis Platform holds one consent record per person and applies the rule set of the state they live in.