As of January 1, 2026, comprehensive consumer privacy laws in Indiana, Kentucky, and Rhode Island took effect, bringing 20 US states with active privacy statutes. They require clear privacy notices, opt-in consent for sensitive data, and Data Protection Impact Assessments; penalties reach $7,500 per violation in IN and KY and $10,000 in RI, and Rhode Island offers no cure period.
Indiana, Kentucky, Rhode Island consumer privacy laws now in force
Any startup collecting consumer data should refresh privacy notices, wire up opt-outs and data-subject request handling, and confirm it isn't over the applicability thresholds now that 20 states enforce.
Source: Koley Jessen
More that helps you.
IRS 1099-K threshold reverts to $20,000 and 200 transactions; the $600 rule is repealed
Under OBBBA the Form 1099-K reporting threshold for third-party payment platforms (Stripe, PayPal, Square, marketplaces) reverts to more than $20,000 in gross payments AND more tha…
FTC revives 'Click-to-Cancel' subscription rulemaking (March 2026)
After the Eighth Circuit vacated the amended Negative Option Rule on July 2, 2025, the FTC issued an Advance Notice of Proposed Rulemaking on March 11, 2026 seeking comment on revi…
FTC proposes policy targeting AI systems steered away from accuracy
On July 1, 2026, the FTC sought public comment on a proposed policy statement warning that companies which distort their AI systems' outputs to serve undisclosed goals may be decei…
Delaware C-corps must file the annual report and franchise tax by March 1, 2026
Every non-exempt Delaware domestic corporation must file its annual report and pay franchise tax by March 1 each year (March 1, 2026 for the 2025 report), whether or not it did bus…
Get briefs like this tuned to you.
In the app, Founder Briefs are personalized to your country, industry and stage, and you can save the ones that matter.
See plans →