Report: Almost half of state consumer privacy laws fail to protect individuals’ data

A report by EPIC and U.S. PIRG finds that 8 of 19 U.S. state consumer privacy laws fail to adequately protect individuals, with none earning an A; only Maryland and California are deemed strong. The groups argue that effective privacy laws should mandate data minimization, regulate sensitive data, restrict profiling, and provide strong enforcement, and note ongoing efforts in Vermont, Massachusetts, and Maine to adopt stronger frameworks.