US data privacy: "stark imbalance" of protection across States

A map infographic showing the US states, with the Private Internet Access (PIA) logo on the left
(Image credit: Private Internet Access)

When it comes to data privacy protection, the US isn't exactly a super power. The American Data Privacy and Protection Act (ADPPA) could be the first comprehensive federal privacy legislation that citizens, experts, and digital rights activists have been calling for. Unfortunately, the Act is under review and nowhere near to be implemented anytime soon.

Americans enjoy vastly different privacy protections based on where they live. This creates opportunities for data breaches and unscrupulous companies to exploit customers' most personal and confidential information. Especially now, one year after Roe vs Wade fell, people in the US need to know how protect the privacy of their digital lives.   

That's why Private Internet Access (PIA), one of the best VPN services out there, decided to look closely at how digital privacy legislations compare around the country. They found that there is a "stark imbalance" of protection between States. Let's dig into the results.

Digital privacy protections: regulation across the US compared

"In an increasingly digital era where so much information about our lives is now online, it is vital that all states recognize the importance of digital privacy for their citizens," said Charlotte Scott, Digital Rights Advocate at PIA.

Scott and the team believe that comparing the level of protection across US States could push lawmakers to act quicker. In the 2nd annual report, researchers looked closely at all the privacy-related laws already passed (privacy, data security, data broker, companies' data collection policies and children's privacy) as well as investments to strengthen the cybersecurity sector at large for each of the 50 US States. 

Unsurprisingly, California secured its spot as the best State for privacy protection legislations and substantial investments in digital privacy and cybersecurity. It was, in fact, the first State to implement a comprehensive privacy law—the California Consumer Privacy Act (CCPA)—in 2020. 

The CCPA was then strengthened by the California Privacy Rights Act (CPRA), which came into effect in January 2023, by adding more obligations for businesses to protect consumers' rights. People in California also benefit from the protection of further legislations that regulates data handling, mandatory notifications in the event of breaches, marketing-related issues, and more.

Connecticut, Colorado and Virginia follow suit thanks to their clear data-sharing policies, proactive approach to data breaches and investment in digital security.

Scott also praised Massachusetts' proposal to ban buying and selling of location data as a positive step forward for better digital privacy in the State. At the moment, the burden is on users to prevent location sharing using tools such a virtual private network (VPN) when browsing and disabling location data collection from apps that don't need this information to function.

She said: "Better regulation, such as [Massachusetts'] Location Shield Act, to limit the buying and selling of location data is much needed."

At the bottom of the rankings with the worst privacy protection in all the US are Arkansas, Mississippi, and Louisiana. Researchers observed a lack of progress in enacting new laws to protect citizen data and privacy.

The situation here gets even worse considering that these States have also enforced measures that further curb people's digital privacy rights, such as mandatory age verification for access to adult content online. Other concerning proposed laws include the TikTok ban In Montana, which, once enforced, will also affect citizens' freedom of speech.

According to PIA experts, "these ill-conceived measures expose citizens to extensive data collection and heightened privacy risks."

"Pressing need" for comprehensive online privacy protection across the US

Overall, PIA's report found relevant and concerning gaps in privacy safeguards across the US, underscoring a "pressing need" for a federal comprehensive privacy law.

According to Scott, the ADPPA could be a critical step for addressing this urgent need and establishing a "brighter digital future, one where privacy is respected and individuals can trust in the security of their digital lives in the United States," she said.

In an ideal world, we would see a pathway to all States having the level of protection offered by the California Consumer Privacy Act.

Charlotte Scott, Private Internet Access

Yet, as often happens in these cases, the ADPPA is anything but perfect. 

So-called pre-emption principle is a concern as imposing a federal law could undermine more comprehensive privacy protection already in place like those in California or Colorado.

"Given the stark imbalance of digital privacy regulation across the US, we would encourage lawmakers to find a way to move forward with the bill that doesn't take away from the larger protections already in place in some States," Scott told TechRadar. 

"In an ideal world, we would see a pathway to all States having the level of protection offered by the California Consumer Privacy Act."

With the ADPPA still passing through Congress, what's certain now is that Americans living in the States are lagging behind when it comes to digital protections and must take the matter into their own hands to secure their privacy online—hopefully not for too long, though.

Chiara Castro
News Editor (Tech Software)

Chiara is a multimedia journalist committed to covering stories to help promote the rights and denounce the abuses of the digital side of life – wherever cybersecurity, markets, and politics tangle up. She writes news, interviews, and analysis on data privacy, online censorship, digital rights, cybercrime, and security software, with a special focus on VPNs, for TechRadar and TechRadar Pro. Got a story, tip-off, or something tech-interesting to say? Reach out to chiara.castro@futurenet.com

Read more
A VPN running on a mobile device
US age verification laws put your privacy at risk – and "VPNs are not a solution”
US President Donald Trump speaks to the press as he signs an executive order to create a US sovereign wealth fund, in the Oval Office of the White House on February 3, 2025, in Washington, DC.
The US privacy nightmare? What's changed after 30 days of President Trump's new administration
Illustration of a US flag and various tech devices
The best US VPN in 2025
The TikTok logo appears on a smartphone screen with the United States flag in the background
Forget the US TikTok ban – what we need is better social media and privacy laws
Abstract illustration of a young woman looking at a smartphone, as large eyes peek through from her hair
Want to hit restart on your online presence? Here's 5 tools you need to stay truly private online
Young woman holds a smartphone with a beam of light obscuring her eyes
Privacy powerhouses: 5 apps to take your online security to the next level
Latest in Cyber Security
The X logo next to a silhouette of Elon Musk
Who was really behind the massive X cyberattack? Here’s what experts say about Elon Musk’s claims
A person holding a phone looking at a scam text with warning signs around
A massive SMS toll fee scam is sweeping the US – here’s how to stay safe, according to the FBI
View on National Assembly building in Paris, France, with French and European flags flying.
France rejects controversial encryption backdoor provision
ignal messaging application President Meredith Whittaker poses for a photograph before an interview at the Europe's largest tech conference, the Web Summit, in Lisbon on November 4, 2022.
"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections
Man uses a laptop in a hotel room
4 ways to avoid misinformation on social media and retain control of your newsfeed
An AI face in profile against a digital background.
Worried about DeepSeek? Well, Google Gemini collects even more of your personal data
Latest in News
Google Pixel 8a in aloe green showing
Google Pixel 9a benchmark link teases the performance of the upcoming mid-ranger
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 17 (game #1148)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Monday, March 17 (game #379)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Monday, March 17 (game #645)
Apple iPhone 16 Pro HANDS ON
Leaked iPhone 17 dummy units may have given us our best look yet at all four models
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over