This article is adapted from the Decrypted podcast series, a
Barnes & Thornburg production on data security and privacy. To
subscribe to Decrypted, click here.
More than 20 states have now enacted comprehensive privacy laws.
Add expanding enforcement, broader sensitive data definitions, and
new protections for teens, and the privacy compliance landscape in
2026 looks very different than it did just a few years ago —
and in-house attorneys need to keep pace.
For in-house counsel, the challenge is no longer just keeping up
with new laws. It is also ensuring that existing programs are still
fit for purpose as regulatory interpretations evolve, sensitive
data categories expand, and regulators focus on emerging issues
around artificial intelligence, biometric data, and the digital
lives of teenagers. This article provides a practical overview of
what has changed, where the pressure points are, and how to build a
program that holds up over time.
