Client Alert
Billee Elliott McAuliffe, Melissa G. Powers, Jacquelyn H. Sicilia
share this page:
The new year is right around the corner, and with it, comes five new U.S. state privacy laws. On January 1, 2023, both the California Privacy Rights Act (CPRA) and the Virginia Consumer Data Protection Act (VCDPA) become effective. The Colorado Privacy Act (ColoPA) and Connecticut Data Privacy Act (CTPA) become effective later in the year on July 1, 2023 with the Utah Consumer Privacy Act (UCPA) following on December 1, 2023. Businesses should act now to ensure they are prepared and organized for the additional regulation that 2023 will bring, especially for the laws that will kick off the new year on January 1.
Generally, these state comprehensive privacy laws regulate businesses’ uses of personal data of their residents and provide increased consumer protections regarding such data. While these laws contain numerous nuances, below is a condensed list of particularly important activities each business subject to these laws will want to conduct in order to facilitate compliance before January 1, 2023.
There are additional considerations for businesses subject to these comprehensive privacy laws, and compliance can take substantial effort and time. Because there is significant overlap between these laws, it may be more cost-effective and efficient for your business to review and update its data privacy practices in accordance with all of the applicable laws at once. Lewis Rice’s Cybersecurity & Data Privacy group is well-versed in the compliance process and has developed resources to assist clients with reaching and maintaining compliance with these laws.
If you have any questions about complying with these laws or other data privacy laws, or need assistance reviewing your data privacy practices for 2023, please contact one of our Cybersecurity & Data Privacy attorneys. For more information, you can also check out the resources found on our U.S. State Privacy Laws page.

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.