--- title: New Compliance Regulations in 2023 description: This year we will see several new compliance regulations in the United States. As always, it's important to be aware of these regulations and make sure you image: https://infusedinnovations.com/hubfs/Imported_Blog_Media/checkmarks-pink-2.jpg --- [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) # New Compliance Regulations in 2023 by [Infused Innovations](https://infusedinnovations.com/blog/author/infused-innovations) 3 min read February 27, 2023 This year we will see several new compliance regulations in the United States. As always, it's important to be aware of these regulations and make sure your organization is compliant with them in order to conduct business safely and avoid legal issues. Domestic companies of all sizes can expect to see a surge and continuation of Zero Trust security recommendations and guidelines, as well as Data Privacy and Protection requirements, related to compliance. This article will provide a look at the landscape around this today and fill you in on the new U.S. compliance regulations in 2023. ## Federal Level  Regulations At the federal level, [**Executive Order (EO) 14028**](https://www.gsa.gov/technology/technology-products-services/it-security/executive-order-14028-improving-the-nations-cybersecurity) is meant to improve the nation's cybersecurity. It applies to federal agencies as well as their suppliers, and the aim is to modernize their approach to cybersecurity by adopting cloud services and implementing a Zero Trust architecture. This also includes a requirement for the supply chain industry, including device manufacturing, and will ripple into contract requirements for federal contractors and software providers.  The [**Federal Trade Commission (FTC) Safeguard Protections Rule**](https://www.ftc.gov/legal-library/browse/rules/safeguards-rule) becomes effective on June 9, 2023 and requires non-bank financial institutions (think financial advisors, cash advance, auto dealerships who provide lending services, and others) to protect and secure customer information. These companies are also responsible to ensure that their service providers do the same.   ## State Level  Meanwhile, the number of states implementing data privacy and protection legislation continues to grow. For the most part, they are reflective generally of the tenets in Europe’s [**General Data Protection Regulation (GDPR)**](https://gdpr.eu/what-is-gdpr/) and the [**California Consumer Privacy Act (CCPA)**](https://infusedinnovations.com/blog/secure-intelligent-workplace/california-consumer-privacy-act), which give consumers control over their private information. These are important privacy laws and will continue to be aspects of compliance that businesses need to consider. ## New State Regulations This Year ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/aakash-dhage-Ir43SiiFUOA-unsplash-1024x576-1-2.jpg) ### Active now (February 2023)  - Initially drafted a few years ago to expand upon the CCPA, the **[California Privacy Rights Act (CPRA)](https://www.shrm.org/resourcesandtools/legal-and-compliance/state-and-local-updates/pages/california-data-privacy-rules.aspx) **became effective on Jan. 1, 2023. CPRA created a new state agency, similar to data protection agencies in the EU countries charged with enforcing [GDPR in the EU](https://gdpr.eu/checklist/).  - The **[Virginia Consumer Data Privacy Act (VCDPA)](https://law.lis.virginia.gov/vacode/title59.1/chapter53/) **also became effective Jan. 1, 2023 and similarly provides for certain GDPR-like individual rights.   ### Effective July 2023 - The [**Colorado Privacy Act (CPA)**](https://coag.gov/resources/colorado-privacy-act/) becomes effective on July 1, 2023. In addition to creating rights patterned after the individual rights under GDPR, CPA requires data security and contract provisions for vendors and assessments for "high-risk" processing.   - Like Colorado's new privacy law, the [**Connecticut Data Privacy Act (CDPA)**](https://portal.ct.gov/AG/Sections/Privacy/The-Connecticut-Data-Privacy-Act#:~:text=The%20CTDPA%20takes%20effect%20on,controllers%20that%20process%20personal%20data.) goes into effect on July 1, 2023. CDPA also creates a suite of GDPR-like individual rights, and similarly requires data minimization, security, and assessments for "high risk" processing.   ### Effective December 2023 - The [**Utah Consumer Privacy Act (UCPA)**](https://le.utah.gov/~2022/bills/static/SB0227.html) becomes effective on Dec. 31, 2023. It provides for certain GDPR-like individual rights and requires data security and contract provisions, but it does not include expressly required risk assessments.   While the new state statutes are intended to be comprehensive, they also contain certain carve-outs for data protection under other laws, such as HIPAA.    ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/checkmarks-purple-1024x838-1-2.jpg) ## Why Following Compliance Regulations in 2023 is Important As with all things tech, this is a rapidly changing landscape that – along with security – holds significant risk potential. Whether you’re launching a start-up and unsure where to start your compliance journey or you're a seasoned enterprise in a highly regulated environment, we can help you jump start or modernize your Information Management goals through a series of Compliance Accelerators, for wherever you are on your compliance journey. The process can seem complex, disconnected, or confusing to those who are busy starting or running a business – so we'll make sure you're set up properly, with quick time to value. [Contact us today](https://infusedinnovations.com/lets-collaborate) to learn more about our Compliance Accelerators, and follow our upcoming blog series which will explain the specifics of each one. #### **Stay connected.** Join the Infused Innovations email list! #### Share this [Share on X ](https://x.com/intent/post?url=https://infusedinnovations.com/blog/secure-intelligent-workplace/new-compliance-regulations-in-2023&text=New%20Compliance%20Regulations%20in%202023) [Share on Facebook ](https://www.facebook.com/sharer/sharer.php?u=https://infusedinnovations.com/blog/secure-intelligent-workplace/new-compliance-regulations-in-2023&t=New%20Compliance%20Regulations%20in%202023) [Share on LinkedIn ](https://www.linkedin.com/shareArticle?mini=true&url=https://infusedinnovations.com/blog/secure-intelligent-workplace/new-compliance-regulations-in-2023&t=New%20Compliance%20Regulations%20in%202023) Previous [← CIO Coverage Names Infused Innovations One of Top 10 Leading Microsoft Partners to Watch in 2023](https://infusedinnovations.com/blog/secure-intelligent-workplace/cio-coverage-names-infused-innovations-among-top-10-leading-microsoft-partners-to-watch-in-2023) Next [Introducing Our Compliance Accelerators →](https://infusedinnovations.com/blog/secure-intelligent-workplace/introducing-our-compliance-accelerators) ### You May Also Like These Related Posts [Why Compliance is Crucial for Small to Medium-Sized Businesses](https://infusedinnovations.com/blog/secure-intelligent-workplace/why-compliance-is-crucial-for-small-to-medium-sized-businesses) ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/compliance-scaled-2.jpg) [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) #### Why Compliance is Crucial for Small to Medium-Sized Businesses March 14, 2023 3 min read [Introducing Our Compliance Accelerators](https://infusedinnovations.com/blog/secure-intelligent-workplace/introducing-our-compliance-accelerators) ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/accelerators-2.jpg) [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) #### Introducing Our Compliance Accelerators March 6, 2023 3 min read [Ensuring Privacy with Microsoft Priva](https://infusedinnovations.com/blog/secure-intelligent-workplace/ensuring-privacy-with-microsoft-priva) ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/Screen-Shot-2022-11-05-at-1_35_39-PM-2048x1308-1-2.png) [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) #### Ensuring Privacy with Microsoft Priva November 7, 2022 3 min read ### No Comments Yet Let us know what you think ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Infused Innovations", "url" : "https://infusedinnovations.com/blog/author/infused-innovations" }, "dateModified" : "2024-07-10T04:08:55.178Z", "datePublished" : "2023-02-27T05:00:00.000Z", "headline" : "New Compliance Regulations in 2023", "image" : [ "https://infusedinnovations.com/hubfs/Imported_Blog_Media/checkmarks-pink-2.jpg" ], "mainEntityOfPage" : { "@id" : "https://infusedinnovations.com/blog/secure-intelligent-workplace/new-compliance-regulations-in-2023", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://infusedinnovations.com/hubfs/ii-logo.svg" }, "name" : "Infused Innovations" } } ```