Throughout the hundreds of pages of data privacy legislation drafted by states in recent years,  there have been clear attempts at filling in the gaps left by an absent federal solution and loopholes created by existing federal privacy laws.

The latest states’ efforts at comprehensive regulation come from Oregon and Delaware, who have now passed their own state data privacy laws. Though the two states’ regulations largely fit into a broader template—a same Christmas tree, different ornaments-type pattern—they do add their own unique provisions.