Share on LinkedInShare on LinkedIn

ARTICLE · 27 JANUARY 2026

Privacy Law Recap 2025—State Enforcement

While 2025 saw no new state comprehensive privacy laws enacted, state enforcement activity accelerated—individually and collaboratively—reflecting trends likely to intensify in 2026.

United StatesPrivacy

While 2025 saw no new state comprehensive privacy laws enacted, state enforcement activity accelerated—individually and collaboratively—reflecting trends likely to intensify in 2026.

Key enforcement focus areas included youth privacy and online safety, consumer rights, and data brokers/data sales. This post discusses highlights from 2025 and looks at expected trends in 2026.

Youth privacy and online safety.Like the FTC, the states have focused on children's privacy and protecting minors. Examples include:

  • Jam City. The California Attorney General alleged that Jam City, a mobile gaming app developer, violated the California Consumer Privacy Act (CCPA) by selling and sharing the personal information of users it knew were aged 13-16 without their consent, failing to maintain effective age gates for several games, and providing child versions of its games only to self-identified under-13 users. In addition to $1.4 million in civil penalties, the settlement requir

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from