On July 13, 2021, Ohio introduced the Ohio Personal Privacy Act (OPPA), which will serve as a privacy foundation for the state, following California, Virginia, and Colorado’s enacted privacy acts.
The OPPA will operate differently from these other states because “Businesses can utilize an affirmative defense from an enforcement action by the Ohio Attorney General or a lawsuit filed by a consumer if the business creates, maintains, and complies with a written privacy program that reasonably conforms to the National Institute of Standards and Technology privacy framework.”