It’s no secret that states are focused on implementing consumer privacy laws given the ubiquity of personal data that is gathered, processed, stored and shared for commercial activities, including those involving financial institutions. Since California passed the California Consumer Privacy Act (CCPA) in 2018, a host of states have followed with their own consumer privacy laws. Since 2024, consumer privacy laws have gone into effect in 10 states, and are expected in four more by the end of 2026.
