Kimberly Gross Kimberly Gross

Rhode Island Becomes 19th State for Data Privacy Legislation

The Rhode Island Data Transparency and Privacy Protection Act (“the Act” or “the Rhode Island Data Privacy Act”) was signed into law on June 28, 2024, and has become the nineteenth state to enact comprehensive consumer data privacy legislation, while many other bills introduced in states such as Maine and Louisiana have gone inactive in recent months. Like other state laws, the Rhode Island Data Privacy Act does not directly address VPD, but it is implied.

Read More
Kimberly Gross Kimberly Gross

Another State Privacy Update as Minnesota Becomes Eighteen

After Minnesota Governor Tim Walz signed the Minnesota Consumer Data Privacy Act (“MCDPA”) on May 24, 2024, Minnesota became the eighteenth state to enact comprehensive consumer data privacy legislation. The MCDPA will go into effect on July 31, 2025. While the conditions of the Act most similarly reflect the Connecticut and Virginia consumer data privacy law models, the MCDPA also applies to technology providers under Minnesota’s education data laws, such as entities that provide technology to schools. As with other state privacy laws, the MCDPA does not directly address VPD, but it is implicated.

Read More
Kimberly Gross Kimberly Gross

Nebraska and Maryland Become 16 and 17: State Data Privacy Law Update

Maryland and Nebraska have joined the ranks after signing their own respective comprehensive data privacy laws. Both the Maryland Online Data Privacy Act, effective October 1, 2025, and the Nebraska Data Privacy Act, effective January 1, 2024, resemble the other state data privacy laws. Like other states, these laws do not address vehicle performance data specifically, but it is implicated.

Read More
Kimberly Gross Kimberly Gross

Kentucky Joins the Ranks of State Data Privacy Legislation

With the signing of the Kentucky Consumer Data Privacy Act (“the Kentucky CDPA”) on April 4, 2024 by Governor Andy Beshear, the state has become the fifteenth state in the US to enact comprehensive data privacy legislation on the state level, going into effective on January 1, 2026.  Like other states, the Kentucky CDPA does not address vehicle performance data (“VPD”) specifically, but it is implicated.

Read More