In 2023, five states passed comprehensive consumer data privacy laws: California, Colorado, Connecticut, Utah, and Virginia. These laws have several provisions in common, such as: 

• The right to access and delete personal information

• The right to opt out of the sale of personal information

The laws reflect the influence of the GDPR's rights-based philosophical framework, according to Bloomberg's Law. They are intended to protect consumers from cyber risks and stay competitive with international data. 

The laws came online throughout the year: 

• Virginia: Law is effective and enforceable on January 1, 2023

• Colorado: Privacy Act (CPA) will go into effect on July 1, 2023

• Connecticut: Data Privacy Act (CTDPA) will take effect on July 1, 2023

• Utah: Consumer Privacy Act (UCPA) will go into effect on December 31, 2023

Other states have bills in progress or have introduced new legislation. 

This is not legal advice. You may want to consult a lawyer about this question.