Privacy and Data Protection Compliance Will Become More ...
Privacy and data protection compliance is expected to become more fragmented in 2024, with growing complexities across international regulatory landscapes.
www.clearygottlieb.comHere are the latest highlights on data privacy regulations from reliable sources:
-
Oklahoma enacted a new comprehensive consumer data privacy law (Oklahoma Consumer Data Privacy Act), with a Jan 1, 2027 effective date. It grants residents rights to access, correct, delete, and port their data, and includes opt-out rights for sales, targeted advertising, and certain profiling; it also imposes data protection duties on controllers and processors. Enforcement is by the state attorney general and does not include a private right of action. This adds to a growing state-level privacy regime in the U.S. as federal legislation remains unsettled.[2]
-
The U.S. landscape continues to see state-level activity in privacy laws (Indiana, Kentucky, Rhode Island, Oregon, Oregon’s geolocation protections, etc.), reinforcing a patchwork approach across the country while federal reform remains in discussion. Consumers can expect more rights and tighter data-use controls at the state level in the near term.[3]
-
Internationally, Safer Internet Day 2026 highlighted AI-aware digital youth safety, and several jurisdictions published important updates to their privacy regimes, including enforcement actions and new data-use rules. Notable regional steps include the UK’s strengthening of data handling for minors and updates to automated decision-making rules, with global attention on how AI systems use personal data.[3]
-
A recent roundup notes ongoing updates to privacy laws in the UK, EU, and US, with emphasis on data minimization, transparency, automated decision-making, and enforcement enhancements. The EU’s GDPR framework continues to influence national implementations and cross-border data flows, while several countries enact or tighten data protection laws to address AI, biometrics, and geolocation data.[1][3]
If you’d like, I can tailor a brief briefings for:
- Your location and business interests in Valletta, Malta (EU privacy framework and how it interacts with GDPR and local laws)
- A country-by-country cheat sheet for the next 12 months
- A quick explainer on what these developments mean for data subject rights and corporate compliance
Would you prefer a regional focus (EU, UK, US) or a global snapshot? I can also pull more precise dates and obligations if you specify your industry.