Private firms operating with little oversight are collecting data that some experts say amount to an unacceptable level of surveillance.

The new law promises to fill gaps left by the landmark California Consumer Protection Act, a 2018 law emulated by other states.

Gov. John Carney signed the Delaware Personal Data Privacy Act into law, making the state the 12th to have a consumer privacy law.

Lawmakers in Pennsylvania began discussing a data privacy bill that would allow consumers to opt out of having their data collected online.

Washington's "My Health, My Data" act provides consumer protections not found in the Health Information Portability and Accountability Act.