The trend toward more robust and nuanced privacy protections continues to grow. In June 2025, Connecticut and Oregon enacted significant amendments to their comprehensive consumer data privacy laws – joining Montana, Utah, Virginia and Colorado, all of which also made major revisions to their laws in 2025. This second installment of a two-part article series examines some of the key changes the Connecticut and Oregon amendments introduce, including a new and unique impact assessment obligation, privacy notice requirements, prohibitions on the sale of certain data types, and heightened protections for children and minors. With insights from McDermott Will & Emery, Hintze Law, Reed Smith and Orrick, it also provides practical compliance measures that companies should consider taking before the revised provisions go into effect. Part one covered the amendments’ broader threshold and scope, new and expanded definitions of key terms, and enhanced consumer protections. See “Connecticut AG’s Report Reveals Privacy Enforcers Reaching Deeper Into Their State Laws” (Apr. 30, 2025).