With only a month left in 2025, businesses that handle consumer data should be preparing for three new state privacy laws taking effect on January 1 in Indiana, Kentucky, and Rhode Island. Each law fits within the growing patchwork of U.S. privacy regulation, but the applicability thresholds differ enough that companies may find themselves covered in one state but not another.