Nine states are collaborating to write and enforce comprehensive data privacy laws, in an effort to protect consumers across jurisdictions and due to the absence of a broad, federal privacy law.
The states involved in the Consortium of Privacy Regulators (CPR) span red and blue states and includes California, which passed a landmark privacy protection law, the California Consumer Privacy Act, in 2020. California also created the California Privacy Protection Agency (CPPA) to write and enforce the state’s privacy rules. California has led the nation in privacy protection and has rolled out thousands of privacy rules, most recently finalizing rules governing cybersecurity, auditing, and automatic decision-making.

