There are a number of new pieces of legislation that are expected to be considered or passed in the United States in 2024 regarding data compliance for businesses. We've already shared laws that were released in 2022 and 2023 but wanted to provide you with a view to what's coming in 2024. Some of the most notable include:
- Montana Consumer Data Privacy Act (MCDPA): The MCDPA is scheduled to take effect on October 1, 2024. It is a comprehensive privacy law that gives consumers a number of rights over their personal data, including the right to access, correct, delete, and opt out of the sale of their personal data. The MCDPA also imposes a number of obligations on businesses, including the requirement to implement reasonable security measures to protect personal data.
- Washington My Health My Data Act (MHMDA): The MHMDA is scheduled to take effect on March 31, 2024, for "regulated entities," and on June 30, 2024, for "small businesses." It is a healthcare privacy law that gives consumers a number of rights over their health data, including the right to access, correct, delete, and share their health data with third parties. The MHMDA also imposes a number of obligations on businesses that handle health data, including the requirement to implement reasonable security measures to protect health data.
- Texas Data Privacy and Security Act (TDPSA): The TDPSA is scheduled to take effect on March 1, 2024. It is a comprehensive privacy law that gives consumers a number of rights over their personal data, including the right to access, correct, delete, and opt out of the sale of their personal data. The TDPSA also imposes a number of obligations on businesses, including the requirement to implement reasonable security measures to protect personal data.
In addition to these state laws, there is also a number of federal data privacy bills that are expected to be considered or passed in 2024. Some of the most notable include:
- American Data Privacy and Protection Act (ADPPA): The ADPPA is a comprehensive privacy bill that has been introduced in the Senate. It is expected to be reintroduced in 2024. The ADPPA would give consumers a number of rights over their personal data, including the right to access, correct, delete, and opt out of the sale of their personal data. The ADPPA also imposes a number of obligations on businesses, including the requirement to implement reasonable security measures to protect personal data.
- Online Privacy and Consumer Protection Act (OPCPA): The OPCPA is a comprehensive privacy bill that has been introduced in the House of Representatives. It is expected to be reintroduced in 2024. The OPCPA would give consumers a number of rights over their personal data, including the right to access, correct, delete, and opt out of the sale of their personal data. The OPCPA also imposes a number of obligations on businesses, including the requirement to implement reasonable security measures to protect personal data.
It is important to note that these pieces of legislation are still in the early stages of development, and it is unclear whether they will be passed into law. However, they are a good indication of the direction that data privacy legislation is headed in the United States.
Businesses should carefully monitor these developments and take steps to ensure that they are in compliance with all applicable data privacy laws.
By taking these steps, businesses can help to reduce the risk of data breaches and other security incidents. To learn more about whether your business is compliant or not, please contact us today or get a free cyberthreat assessment.
