State Data Privacy Laws & Civil Rights Protections

Survey of states shows lack of privacy protections for communities of color

Congressional failure to pass comprehensive federal data privacy legislation means the vast majority of people in the United States lack protection. This inaction has left an opening for state legislatures to enact their own privacy laws, and, as of now, 19 states have some form of comprehensive data privacy laws on the books. However, many of these states’ laws lack critical protections, including preventing discriminatory uses of data.

Feature Image: State Data Privacy Laws & Civil Rights Protections

The imperative to protect privacy is great. Right now, “black box” algorithms and AI systems use our personal data on a daily basis to make decisions that impact our lives. These systems and data can mean the difference between accessing lifesaving health care, a vital small business loan, or entrance into the college of our dreams. The reality is these systems can and do discriminate against people of color and other marginalized groups, limiting our opportunities to essential goods and services.

The Leadership Conference’s Center for Civil Rights and Technology (the Center) only found two states with a consumer privacy law that includes explicit civil rights protections. The absence of explicit civil rights protections is a direct result of lobbying from Big Tech. Lack of federal action means 321.41 million people in the United States lack civil rights data protections — and 132.59 million of those individuals are people of color. 

 

We ALL deserve data privacy protections that center our civil rights. Privacy rights are civil rights.

Civil Rights Data Privacy Laws by State

Click on a state below to better understand the patchwork of civil rights data laws and how people of color are being left behind

AK HI WA OR CA NV AZ UT ID MT WY CO NM TX OK KS NE SD ND MN WI IL IA MO AR LA MS AL GA FL SC NC TN KY IN MI OH WV VA PA NY ME NH VT MA RI CT NJ DE MD DC

  • States with No Comprehensive Consumer Data Privacy Law

  • States with Comprehensive Consumer Data Privacy Law

  • States with Explicit Civil Rights Protections in Comprehensive Consumer Data Privacy Law

Alaska
Comprehensive Data Privacy Law
Has a Comprehensive Data Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Data Privacy Law? No
Racial Demographics
% Hispanic, all races 7.70%
% Non-Hispanic White 58.80%
% Non-Hispanic Black 3.24%
% Non-Hispanic American Indian or Alaska Native 14.87%
% Non-Hispanic Asian 6.52%
% Non-Hispanic Native Hawaiian or Pacific Islander 1.59%
% Non-Hispanic 2 or more races 7.28%
Hawaii
Comprehensive Data Privacy Law
Has Comprehensive Data Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Data Privacy Law? No
Racial Demographics
% Hispanic, all races 11.12%
% Non-Hispanic White 21.29%
% Non-Hispanic Black 1.95%
% Non-Hispanic American Indian or Alaska Native 0.21%
% Non-Hispanic Asian 35.90%
% Non-Hispanic Native Hawaiian or Pacific Islander 9.53%
% Non-Hispanic 2 or more races 20.00%
Alabama
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 4.93%
% Non-Hispanic White 64.71%
% Non-Hispanic Black 26.43%
% Non-Hispanic American Indian or Alaska Native 0.55%
% Non-Hispanic Asian 1.55%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.05%
% Non-Hispanic 2 or more races 1.77%
Arkansas
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 8.55%
% Non-Hispanic White 70.97%
% Non-Hispanic Black 15.33%
% Non-Hispanic American Indian or Alaska Native 0.79%
% Non-Hispanic Asian 1.78%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.42%
% Non-Hispanic 2 or more races 2.15%
Arizona
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 32.46%
% Non-Hispanic White 52.93%
% Non-Hispanic Black 4.76%
% Non-Hispanic American Indian or Alaska Native 3.73%
% Non-Hispanic Asian 3.64%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.20%
% Non-Hispanic 2 or more races 2.30%
California
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 40.31%
% Non-Hispanic White 34.73%
% Non-Hispanic Black 5.58%
% Non-Hispanic American Indian or Alaska Native 0.41%
% Non-Hispanic Asian 15.59%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.37%
% Non-Hispanic 2 or more races 3.01%
Colorado
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 22.52%
% Non-Hispanic White 66.47%
% Non-Hispanic Black 4.13%
% Non-Hispanic American Indian or Alaska Native 0.63%
% Non-Hispanic Asian 3,55%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.16%
% Non-Hispanic 2 or more races 2.54%
Connecticut
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 18.17%
% Non-Hispanic White 63.86%
% Non-Hispanic Black 10.73%
% Non-Hispanic American Indian or Alaska Native 0.22%
% Non-Hispanic Asian 5.04%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.04%
% Non-Hispanic 2 or more races 1.93%
Delaware
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 10.34%
% Non-Hispanic White 59.99%
% Non-Hispanic Black 22.47%
% Non-Hispanic American Indian or Alaska Native 0.30%
% Non-Hispanic Asian 4.28%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 2.58%
Florida
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 27.09%
% Non-Hispanic White 52.34%
% Non-Hispanic Black 15.42%
% Non-Hispanic American Indian or Alaska Native 0.25%
% Non-Hispanic Asian 3.00%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.07%
% Non-Hispanic 2 or more races 1.84%
Georgia
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 10.45%
% Non-Hispanic White 50.40%
% Non-Hispanic Black 32.09%
% Non-Hispanic American Indian or Alaska Native 0.23%
% Non-Hispanic Asian 4.67%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.07%
% Non-Hispanic 2 or more races 2.08%
Iowa
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 6.93%
% Non-Hispanic White 83.73%
% Non-Hispanic Black 4.20%
% Non-Hispanic American Indian or Alaska Native 0.31%
% Non-Hispanic Asian 2.71%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.20%
% Non-Hispanic 2 or more races 1.91%
Idaho
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 13.51%
% Non-Hispanic White 80.71%
% Non-Hispanic Black 0.79%
% Non-Hispanic American Indian or Alaska Native 1.02%
% Non-Hispanic Asian 1.53%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.19%
% Non-Hispanic 2 or more races 2.25%
Illinois
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 18.31%
% Non-Hispanic White 59.48%
% Non-Hispanic Black 14.10%
% Non-Hispanic American Indian or Alaska Native 0.16%
% Non-Hispanic Asian 6.12%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 1.81%
Indiana
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 7.93%
% Non-Hispanic White 77.04%
% Non-Hispanic Black 9.88%
% Non-Hispanic American Indian or Alaska Native 0.23%
% Non-Hispanic Asian 2.76%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.04%
% Non-Hispanic 2 or more races 2.11%
Kansas
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 13.04%
% Non-Hispanic White 74.34%
% Non-Hispanic Black 5.77%
% Non-Hispanic American Indian or Alaska Native 0.78%
% Non-Hispanic Asian 3.13%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.12%
% Non-Hispanic 2 or more races 2.82%
Kentucky
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Data Privacy Policy? No
Racial Demographics
% Hispanic, all races 4.32%
% Non-Hispanic White 83.20%
% Non-Hispanic Black 8.39%
% Non-Hispanic American Indian or Alaska Native 0.21%
% Non-Hispanic Asian 1.72%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.08%
% Non-Hispanic 2 or more races 2.08%
Louisiana
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 5.80%
% Non-Hispanic White 57.79%
% Non-Hispanic Black 32.19%
% Non-Hispanic American Indian or Alaska Native 0.65%
% Non-Hispanic Asian 1.86%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.04%
% Non-Hispanic 2 or more races 1.66%
Massachusetts
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Data Privacy Policy? No
Racial Demographics
% Hispanic, all races 13.09%
% Non-Hispanic White 69.55%
% Non-Hispanic Black 7.54%
% Non-Hispanic American Indian or Alaska Native 0.18%
% Non-Hispanic Asian 7.59%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.05%
% Non-Hispanic 2 or more races 2.00%
Maryland
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? Yes
Racial Demographics
% Hispanic, all races 11.47%
% Non-Hispanic White 48.28%
% Non-Hispanic Black 30.39%
% Non-Hispanic American Indian or Alaska Native 0.24%
% Non-Hispanic Asian 6.91%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.05%
% Non-Hispanic 2 or more races 2.67%
Maine
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 2.09%
% Non-Hispanic White 92.19%
% Non-Hispanic Black 1.87%
% Non-Hispanic American Indian or Alaska Native 0.64%
% Non-Hispanic Asian 1.35%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 1.82%
Michigan
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Data Privacy Policy? No
Racial Demographics
% Hispanic, all races 5.72%
% Non-Hispanic White 73.98%
% Non-Hispanic Black 13.77%
% Non-Hispanic American Indian or Alaska Native 0.57%
% Non-Hispanic Asian 3.47%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 2.46%
Minnesota
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Data Privacy Policy? Yes
Racial Demographics
% Hispanic, all races 4.93%
% Non-Hispanic White 64.71%
% Non-Hispanic Black 26.43%
% Non-Hispanic American Indian or Alaska Native 0.55%
% Non-Hispanic Asian 1.55%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.05%
% Non-Hispanic 2 or more races 1.77%
Missouri
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 5.72%
% Non-Hispanic White 73.98%
% Non-Hispanic Black 13.77%
% Non-Hispanic American Indian or Alaska Native 0.57%
% Non-Hispanic Asian 3.47%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 2.46%
Mississippi
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 3.57%
% Non-Hispanic White 56.03%
% Non-Hispanic Black 37.37%
% Non-Hispanic American Indian or Alaska Native 0.51%
% Non-Hispanic Asian 1.13%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.04%
% Non-Hispanic 2 or more races 1.35%
Montana
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 4.52%
% Non-Hispanic White 85.29%
% Non-Hispanic Black 0.55%
% Non-Hispanic American Indian or Alaska Native 5.87%
% Non-Hispanic Asian 1.03%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.08%
% Non-Hispanic 2 or more races 2.66%
North Carolina
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 10.49%
% Non-Hispanic White 61.54%
% Non-Hispanic Black 21.19%
% Non-Hispanic American Indian or Alaska Native 1.04%
% Non-Hispanic Asian 3.46%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.07%
% Non-Hispanic 2 or more races 2.21%
North Dakota
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 4.63%
% Non-Hispanic White 83.03%
% Non-Hispanic Black 3.43%
% Non-Hispanic American Indian or Alaska Native 4.83%
% Non-Hispanic Asian 1.69%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.09%
% Non-Hispanic 2 or more races 2.29%
Nebraska
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 12.32%
% Non-Hispanic White 76.94%
% Non-Hispanic Black 5.00%
% Non-Hispanic American Indian or Alaska Native 0.82%
% Non-Hispanic Asian 2.73%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.07%
% Non-Hispanic 2 or more races 2.12%
New Hampshire
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 4.60%
% Non-Hispanic White 88.77%
% Non-Hispanic Black 1.60%
% Non-Hispanic American Indian or Alaska Native 0.21%
% Non-Hispanic Asian 3.13%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 1.66%
New Jersey
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 21.90%
% Non-Hispanic White 52.89%
% Non-Hispanic Black 13.01%
% Non-Hispanic American Indian or Alaska Native 0.15%
% Non-Hispanic Asian 10.34%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.04%
% Non-Hispanic 2 or more races 1.67%
New Mexico
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 50.15%
% Non-Hispanic White 35.71%
% Non-Hispanic Black 1.97%
% Non-Hispanic American Indian or Alaska Native 8.76%
% Non-Hispanic Asian 1.69%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.07%
% Non-Hispanic 2 or more races 1.65%
Nevada
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 30.25%
% Non-Hispanic White 65.70%
% Non-Hispanic Black 9.73%
% Non-Hispanic American Indian or Alaska Native 0.83%
% Non-Hispanic Asian 8.93%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.70%
% Non-Hispanic 2 or more races 3.86%

New York

Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Data Privacy Policy? No
Racial Demographics
% Hispanic, all races 19.65%
% Non-Hispanic White 54.22%
% Non-Hispanic Black 14.42%
% Non-Hispanic American Indian or Alaska Native 0.30%
% Non-Hispanic Asian 9.41%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.05%
% Non-Hispanic 2 or more races 1.95%
Ohio
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 4.47%
% Non-Hispanic White 77.30%
% Non-Hispanic Black 12.89%
% Non-Hispanic American Indian or Alaska Native 0.19%
% Non-Hispanic Asian 2.71%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.05%
% Non-Hispanic 2 or more races 2.40%
Oklahoma
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 12.11%
% Non-Hispanic White 63.42%
% Non-Hispanic Black 7.48%
% Non-Hispanic American Indian or Alaska Native 8.29%
% Non-Hispanic Asian 2.49%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.21%
% Non-Hispanic 2 or more races 6.00%
Oregon
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 14.38%
% Non-Hispanic White 73.54%
% Non-Hispanic Black 2.04%
% Non-Hispanic American Indian or Alaska Native 1.09%
% Non-Hispanic Asian 4.95%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.43%
% Non-Hispanic 2 or more races 3.57%
Pennsylvania
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 8.60%
% Non-Hispanic White 74.49%
% Non-Hispanic Black 10.82%
% Non-Hispanic American Indian or Alaska Native 0.15%
% Non-Hispanic Asian 4.01%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 1.90%
Rhode Island
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 17.55%
% Non-Hispanic White 69.88%
% Non-Hispanic Black 6.30%
% Non-Hispanic American Indian or Alaska Native 0.41%
% Non-Hispanic Asian 3.51%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.06%
% Non-Hispanic 2 or more races 2.27%
South Carolina
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 6.59%
% Non-Hispanic White 63.46%
% Non-Hispanic Black 25.64%
% Non-Hispanic American Indian or Alaska Native 0.36%
% Non-Hispanic Asian 1.94%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.06%
% Non-Hispanic 2 or more races 1.95%
South Dakota
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 4.89%
% Non-Hispanic White 80.70%
% Non-Hispanic Black 2.44%
% Non-Hispanic American Indian or Alaska Native 7.71%
% Non-Hispanic Asian 1.74%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.09%
% Non-Hispanic 2 or more races 2.43%
Tennessee
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 6.37%
% Non-Hispanic White 72.91%
% Non-Hispanic Black 16.36%
% Non-Hispanic American Indian or Alaska Native 0.29%
% Non-Hispanic Asian 2.01%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.06%
% Non-Hispanic 2 or more races 2.00%
Texas
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 40.19%
% Non-Hispanic White 39.76%
% Non-Hispanic Black 12.46%
% Non-Hispanic American Indian or Alaska Native 0.33%
% Non-Hispanic Asian 5.51%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.10%
% Non-Hispanic 2 or more races 1.66%
Utah
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 15.15%
% Non-Hispanic White 76.69%
% Non-Hispanic Black 1.22%
% Non-Hispanic American Indian or Alaska Native 0.89%
% Non-Hispanic Asian 2.64%
% Non-Hispanic Native Hawaiian or Pacific Islander 1.06%
% Non-Hispanic 2 or more races 2.35%
Virginia
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? Yes
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 10.49%
% Non-Hispanic White 59.84%
% Non-Hispanic Black 19.16%
% Non-Hispanic American Indian or Alaska Native 0.27%
% Non-Hispanic Asian 7.19%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.07%
% Non-Hispanic 2 or more races 2.97%
Vermont
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 2.30%
% Non-Hispanic White 91.94%
% Non-Hispanic Black 1.40%
% Non-Hispanic American Indian or Alaska Native 0.32%
% Non-Hispanic Asian 2.03%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.03%
% Non-Hispanic 2 or more races 1.98%
Washington
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 14.04%
% Non-Hispanic White 65.14%
% Non-Hispanic Black 4.16%
% Non-Hispanic American Indian or Alaska Native 1.21%
% Non-Hispanic Asian 10.20%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.76%
% Non-Hispanic 2 or more races 4.48%
Wisconsin
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 7.61%
% Non-Hispanic White 80.10%
% Non-Hispanic Black 6.27%
% Non-Hispanic American Indian or Alaska Native 0.89%
% Non-Hispanic Asian 3.17%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.04%
% Non-Hispanic 2 or more races 1.92%
West Virginia
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 2.07%
% Non-Hispanic White 91.16%
% Non-Hispanic Black 3.60%
% Non-Hispanic American Indian or Alaska Native 0.22%
% Non-Hispanic Asian 0.89%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.02%
% Non-Hispanic 2 or more races 2.03%
Wyoming
Comprehensive Data Privacy Law
Has a Comprehensive Privacy Law? No
Has Explicit Civil Rights Protections in Comprehensive Privacy Law? No
Racial Demographics
% Hispanic, all races 10.80%
% Non-Hispanic White 83.07%
% Non-Hispanic Black 1.03%
% Non-Hispanic American Indian or Alaska Native 2.03%
% Non-Hispanic Asian 1.02%
% Non-Hispanic Native Hawaiian or Pacific Islander 0.07%
% Non-Hispanic 2 or more races 1.97%

Note: Population as of July 1, 2022
Source: U.S Census Bureau Population Estimates. Vintage 2022 — State Characteristics. Accessed May 2024.

The Center determined if the data privacy laws protect civil rights by asking the following questions:

  • Does the state have a comprehensive data privacy law on the books? 
  • If yes, does the state’s comprehensive data privacy law explicitly prohibit using personal data to discriminate on the basis of protected characteristics?

Our assessment of “comprehensive data privacy” adopts the International Association of Privacy Professionals (IAPP) definition. IAPP defines “comprehensive” data privacy legislation as: “work[ing] backward from what isn’t comprehensive… [A] bill is not considered comprehensive if ‘it does not qualify due to its scope, coverage, or rights.’” Essentially, to be considered comprehensive, a data privacy law must cut across sectors and issues, and not simply be limited to health care data, for example. Comprehensiveness, as it relates to data privacy, is not a values-based assessment, but merely a descriptive tool. 

Although these laws may have a comprehensive scope, the vast majority of them lack protections against data-based discrimination (i.e., a prohibition on using personal data to discriminate on the basis of protected characteristics). Civil rights provisions are an essential ingredient of any data privacy law that seeks to go beyond basic consumer protections to protect all citizens from discrimination.

We found that 19 states have some form of comprehensive consumer data privacy laws on the books, but only two — Maryland and Minnesota — include explicit civil rights protections. The remaining 17 states merely prohibit practices that already violate the law — potentially leaving new, high-tech harms unaddressed: 

  1. California
  2. Colorado
  3. Connecticut
  4. Delaware
  5. Indiana
  6. Iowa
  7. Kentucky
  8. Maryland — Civil Rights Protective
  9. Minnesota — Civil Rights Protective
  10. Montana
  11. Nebraska
  12. New Hampshire
  13. New Jersey
  14. Oregon 
  15. Rhode Island
  16. Tennessee
  17. Texas
  18. Utah
  19. Virginia

Note: Many of the states listed above have provisions in their comprehensive data privacy laws that make reference to civil rights and anti-discrimination, but they do not fit the definition of explicit civil rights protection (a prohibition on using personal data to discriminate on the basis of protected characteristics) used for purposes of this map.  

Using data from the 2022 U.S Census Bureau Population Estimates, the Center also examined the number of people who lack explicit civil rights data privacy protections across race and ethnicity:

Civil Rights Data Privacy Policy by Race & Ethnicity
Race & Ethnicity Number of People Without Explicit Civil Rights Data Protections
Hispanic, all races 62,616,116
Non-Hispanic White 188,811,755
Non-Hispanic Black 39,773,989
Non-Hispanic American Indian and Alaska Native 2,346,404
Non-Hispanic Asian 19,541,394
Non-Hispanic Native Hawaiian and Other Pacific Islander 629,378
Non-Hispanic 2 or more races 7,686,677
Non-White and Hispanic 132,593,958
All races and ethnicities 321,405,713

 

The bottom line is: People of color across the United States deserve explicit civil rights protections against data-based discrimination. 

A special thank you to team members at the American Civil Liberties Union (ACLU), Electronic Privacy Information Center (EPIC), and International Association of Privacy Professionals (IAPP) who provided counsel during the production of this interactive map tool and took time to review the content of this webpage for accuracy.

Splash Statement
Project 2025: What’s At Stake for Civil Rights Register & Make a Plan to Vote