As of January 1, 2026, comprehensive consumer privacy laws in Indiana, Kentucky, and Rhode Island took effect, bringing 20 US states with active privacy statutes. They require clear privacy notices, opt-in consent for sensitive data, and Data Protection Impact Assessments; penalties reach $7,500 per violation in IN and KY and $10,000 in RI, and Rhode Island offers no cure period.
Indiana, Kentucky, Rhode Island consumer privacy laws now in force
Any startup collecting consumer data should refresh privacy notices, wire up opt-outs and data-subject request handling, and confirm it isn't over the applicability thresholds now that 20 states enforce.
Source: Koley Jessen
More that helps you.
Brazil Pix rule IN BCB 766: 80-day MED dispute window, layered fraud tracing
Instrucao Normativa BCB no 766 (published in the DOU on 29 July 2026) upgrades Pix fraud handling in phases. From 10 August 2026 a layered tracking system (a new transaction-depth…
China eases data-privacy compliance for small processors under 100,000 users
On 22 July 2026 the Cyberspace Administration of China and the Ministry of Public Security released Simplified Measures for 'small processors' that handle the personal information…
Tax reform: startups must fill CBS/IBS fields on e-invoices from Aug 3, 2026
Under Brazil's consumption tax reform transition, completing the new CBS and IBS fields on electronic invoices (NF-e, NFC-e and transport documents) became mandatory on August 3, 2…
AI transparency rules now enforced in Sweden: label chatbots and AI content
From 2 August 2026 the EU AI Act's transparency obligations (Article 50) are enforced and apply directly in Sweden: businesses must tell users when they are interacting with a chat…
Get briefs like this tuned to you.
In the app, Founder Briefs are personalized to your country, industry and stage, and you can save the ones that matter.
See plans →