Beyond the TCPA and mini-TCPA texting rules, a separate wave of state consumer-privacy laws now governs how organizations collect, use, and share personal data, phone numbers included. Whether and how these reach a political campaign is nuanced, with common exemptions, but the trend is real, and good data practices protect you no matter how the exemptions shake out. Here's the landscape.
What are state privacy laws?
Comprehensive consumer-privacy statutes, led by California and now enacted in many states, that give individuals rights over their personal data and impose obligations on the organizations that hold it, disclosure, access, deletion, and limits on use. A phone number tied to a person is personal data, so in principle these laws touch the data underlying a texting program. The specifics vary widely by state.
Do they apply to political campaigns?
Often not directly, but don't assume. Many state privacy laws carve out nonprofits, political organizations, or data already regulated by other statutes, and some are aimed squarely at commercial data brokers rather than campaigns. So a campaign frequently falls outside the core of these laws, or inside an exemption. But "often" and "frequently" aren't "always", the exemptions differ by state and evolve, and vendors and coalition partners a campaign shares data with may themselves be covered. The safe posture is to confirm applicability in the states you operate rather than assume a blanket exemption.
Why does data hygiene matter regardless?
Because good practices protect you whether or not a given law applies, and they overlap with what you already owe under the TCPA. Collect only what you need, be honest at the opt-in about how data is used, keep it secure, honor deletion and opt-out requests, and document your consent. These are privacy best practices and TCPA best practices at once, so a campaign that handles texting data cleanly is largely prepared for the privacy-law question however it resolves. The trend is toward more regulation, not less, so building good habits now is the low-risk move.
Frequently asked questions
Do state privacy laws apply to political campaigns?
Often not directly, many carve out nonprofits, political organizations, or data regulated by other statutes, but it varies by state and can reach vendors and partners. Confirm applicability rather than assuming a blanket exemption.
What data do these laws cover?
Personal data, including phone numbers tied to a person, with rights like disclosure, access, and deletion, and obligations on how organizations use and share it. The specifics differ by state.
How should campaigns handle texting data?
With good hygiene regardless of exemptions: collect only what you need, be honest at opt-in about use, secure it, honor deletion and opt-out requests, and document consent. These overlap with TCPA best practices.
Keep reading: what your opt-in language should say and recordkeeping for text compliance. For the rules, see the FCC.
This is general information, not legal advice. Privacy laws vary widely by state and change, current as of the date above; consult counsel.