Lexology January 21, 2026
Shumaker Loop & Kendrick LLP

What Businesses Need to Know

Contrary to the expectations of many in the privacy field, no new state-level data privacy laws were passed in 2025. As we enter 2026, however, several laws that were passed in 2024, along with several other updates and changes to existing privacy laws and laws governing artificial intelligence (AI) and data breach notification, are taking effect. Here are the new and/or improved laws that businesses need to be aware of in the new year:

I. New Comprehensive State Consumer Privacy Laws Effective January 1, 2026

1) Indiana: Indiana Consumer Data Protection Act (ICDPA)

Effective date: January 1, 2026. (Government of Indiana)

Applies to: Businesses that (1) conduct business in Indiana (or target Indiana residents) and,...

Today's Sponsors

Venturous
ZeOmega

Today's Sponsor

Venturous

 
Topics: Govt Agencies, Healthcare System, Privacy / Security, Regulations, States
Data Privacy In A World Built To Collect Everything
Why Data Privacy Is A Strategic Imperative For Every Organization
Updates to HIPAA Notice of Privacy Practices Required by February 16, 2026
Your Medical Privacy Could Be At Risk, A New Lawsuit Shows
MIT scientists investigate memorization risk in the age of clinical AI

Share Article