--- title: "States to Watch for Data Privacy and Protection Laws" id: "9128" type: "post" slug: "states-to-watch-for-data-privacy-and-protection-laws" published_at: "2019-04-02T00:00:00+00:00" modified_at: "2026-03-15T02:51:09+00:00" url: "https://associationsnow.com/2019/04/02/states-to-watch-for-data-privacy-and-protection-laws/" markdown_url: "https://associationsnow.com/2019/04/02/states-to-watch-for-data-privacy-and-protection-laws.md" excerpt: "States like California, Hawaii, and Washington have passed or proposed new laws that provide their citizens with greater transparency and control over personal data. Much like the European Union’s General Data Protection Regulation (opens in a new tab) that took..." taxonomy_category: - "Ethics" taxonomy_post_tag: - "ASAEcenter" - "Compliance" - "consumer rights" - "Data Management" - "Legislation" - "privacy" taxonomy_content_format: - "Article" taxonomy_role: - "C-Level" - "Director" - "Executive Team" - "VP" taxonomy_persona: - "Executive Leadership" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » States to Watch for Data Privacy and Protection Laws States like California, Hawaii, and Washington have passed or proposed new laws that provide their citizens with greater transparency and control over personal data. Much like the European Union’s [General Data Protection Regulation (opens in a new tab)](https://www.asaecenter.org/resources/articles/an_magazine/2018/march-april/countdown-to-gdpr) that took effect in May 2018, these laws allow consumers to see what data is collected on them and what the data will be used. To recognize what this new consumer awareness and movement toward data privacy and protection laws mean for companies and consumers alike, it helps to have a strong understanding of what GDPR entails. GDPR is still considered by many to be the gold standard for data rights and is essentially a set of rules designed to give European citizens greater control over their personal data. It tries to decrease the confusion surrounding the regulatory environment for business, so both citizens and corporations can fully benefit from the digital economy. These reforms are designed to reflect our technological age and provides legal obligations around personal data, privacy, and consent management. This means that any organization that has access to personal information about customers—such as their name, birth date, credit card information, or social security number—has an obligation to keep information safe and to be compliant with how they collect and store that data. Since GDPR went into effect, many states have followed suit with similar regulations. Here’s what the current national landscape looks like for data privacy and protection laws. **California.**The California Consumer Privacy Act (CCPA), which [was passed in June 2018](https://associationsnow.com/2018/06/california-fast-tracks-data-privacy-legislation-law/) , goes beyond breach notification and may require organizations to make significant changes in their data-processing operations. That includes honoring opt-outs of selling data and notification requirements surrounding data-sharing practices. The law provides California residents with the right to: - Know what information is being collected. - Know whether personal information has been sold or disclosed and where. - Refuse the sale of personal information. - Access personal data and information collected by organizations. California is the first state to implement a privacy regulation that looks like GDPR. With [the passage of CCPA (opens in a new tab)](https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=201720180AB375) , enforcement actions are set to begin in July 2020, and organizations will have until January to prepare. **States to watch.** [Hawaii (opens in a new tab)](https://www.capitol.hawaii.gov/measure_indiv.aspx?billtype=SB&billnumber=418&year=2019) and [Washington (opens in a new tab)](https://app.leg.wa.gov/billsummary?BillNumber=5376&Year=2019&Initiative=false) recently proposed bills that are modeled on CCPA and GDPR. Hawaii has notice and transparency requirements that organizations must make to consumers. The proposed law also establishes a broad definition of personal data. However, no breach requirements are included. Meanwhile, Washington has proposed a bill that contains several notice requirements and consumer rights that are targeted at organizations within the state, as well as organizations targeting state residents with goods and services. As increased awareness, interest, and concern around consumer data continues to increase, there’s no doubt we will see more privacy laws, especially at the state level. That’s why it’s vital that associations make the necessary adjustments to not only comply with these new regulations but also to protect their brand and reputation by honoring consumers’ requests to protect personal data. And as more states adopt data protection laws, it can only be assumed that discussions around data privacy will increase at the [federal level as well](https://associationsnow.com/2018/11/momentum-picks-up-for-federal-data-privacy-protection/) . [Matt Dumiak](https://associationsnow.com/author/matt-dumiak/) Matt Dumiak is director of privacy services and customer engagement compliance at CompliancePoint in Atlanta. [More articles by this author](https://associationsnow.com/author/matt-dumiak/) Tags: [#Compliance](https://associationsnow.com/tag/compliance/) [#consumer rights](https://associationsnow.com/tag/consumer-rights/) [#Data Management](https://associationsnow.com/tag/data-management/) [#Legislation](https://associationsnow.com/tag/legislation/) [#privacy](https://associationsnow.com/tag/privacy/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations NOW Presents: Powering Advocacy-Why PACs Matter for AssociationsNovember 20, 2025](https://associationsnow.com/2025/11/20/associations-now-presents-powering-advocacy-why-pacs-matter-for-associations/) - [ArticleFive Key Legal Issues to Consider When It Comes to Generative AIApril 27, 2023](https://associationsnow.com/2023/04/27/five-key-legal-issues-to-consider-when-it-comes-to-generative-ai/) - [ArticleThink You Know Your Data Privacy? Try This QuizDecember 15, 2021](https://associationsnow.com/2021/12/15/think-you-know-your-data-privacy-try-this-quiz/) - [ArticleWhen KPIs Clean Up the Mess: Teaching Leaders to Read Dashboards Without Losing Sight of RealityJanuary 26, 2026](https://associationsnow.com/2026/01/26/when-kpis-clean-up-the-mess-teaching-leaders-to-read-dashboards-without-losing-sight-of-reality/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2019%2F04%2F02%2Fstates-to-watch-for-data-privacy-and-protection-laws%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !