Lacking a federal comprehensive data privacy law in the United States, five states have passed their own privacy legislation. These new laws are going into effect in 2023. Let’s break down the thresholds for companies that must comply with data privacy laws in California, Virginia, Colorado, Connecticut, and Utah.