In July 2021, the Uniform Law Commission (ULC) approved the final version of the Uniform Personal Data Protection Act (UPDPA). The ULC took a novel approach when drafting this model act, which it claims has “elements that make [the UPDPA] more practical, more flexible, and less costly than other models of state privacy legislation.”
At this point, it remains unclear whether the UPDPA’s novel approach struck the balance needed to gain traction at the state level. To date, UPDPA-based legislation has been introduced in Nebraska, Oklahoma, and Washington, D.C. Rather than following this model law, many states have focused their efforts on legislation modeled after either the Virginia Consumer Data Protection Act (VCDPA) or the California Consumer Privacy Act (CCPA).
