Federal privacy law highly unlikely in 2026, leaving states to continue setting their own rules

Over the next two years, several new state privacy laws and amendments will take effect, expanding requirements around sensitive, health and children’s data while lowering thresholds for coverage and increasing oversight of vendors and data brokers.