Media Center

April 2, 2026
Publications

Pennsylvania businesses face increasing privacy and data security obligations, even without a single statewide consumer privacy law. Instead, Pennsylvania privacy law is shaped by the Unfair Trade Practices and Consumer Protection Law (UTPCPL), the Breach of Personal Information Notification Act (BPINA), and common law. That makes compliance in Pennsylvania more limited than in some states, but still important for businesses that collect, use, or store sensitive personal information.

Key takeaways

• Pennsylvania does not currently have a single comprehensive consumer privacy statute.
• Privacy risk often centers on deceptive practices, data security, and breach response.
• BPINA sets breach notification and related security requirements.
• Pennsylvania courts have recognized a common-law duty to use reasonable care to protect sensitive personal information.
• Pennsylvania law does not currently provide broad statutory consumer rights such as access, deletion, correction, portability, or opt-out rights.

For businesses, privacy risks in Pennsylvania often center on deceptive practices, data security, and breach response rather than a broad set of statutory consumer rights. Misleading privacy statements may expose a party under the UTPCPL, while BPINA applies to breaches involving covered personal information and imposes notice and related security requirements.

Pennsylvania courts have also recognized a common-law duty to use reasonable care to protect sensitive personal information. At the same time, Pennsylvania law does not currently provide a broad statutory framework for consumer rights such as access, deletion, correction, portability, or opt-out rights under the UTPCPL or BPINA.

For readers seeking a deeper look at Pennsylvania’s privacy framework, the complete Pennsylvania Privacy Overview is available on OneTrust DataGuidance and requires an active subscription. Our privacy and data security team helps businesses assess privacy risk, respond to security incidents, and navigate evolving obligations under Pennsylvania and other applicable laws.