With eight new state privacy laws taking effect in 2025, and the introduction of amendments to existing laws, the U.S. privacy landscape continues its rapid evolution in the absence of a federal framework. For legal counsel and compliance professionals, it is a challenge to operationalize compliance across jurisdictions with diverging definitions, rights and enforcement mechanisms. This retrospective roundup curates a selection of the Cybersecurity Law Report’s 2025 content that addresses the complexities of managing state privacy law developments and offers lessons from key regulatory settlements. Topics include cookie compliance, handling sensitive data classifications that now include neural and biometric data, and integrating universal opt-out mechanisms across multiple states.