Several new state-level data privacy laws become effective beginning on January 1, 2025 (including Iowa, Delaware, New Hampshire, and Nebraska), with additional state laws coming into effect in 2025 (including New Jersey on January 15, Tennessee and Minnesota in July, and Maryland in October) and in 2026 (including Indiana, Kentucky, and Rhode Island). With 20 states having enacted privacy laws, the rapidly shifting landscape of state data privacy protections makes it critical for businesses to stay on top of the latest developments. Franchisors should not only continue to review their privacy policies but also advise franchisees to adopt privacy policies that comply with federal and state laws.