The trend toward more robust and nuanced privacy protection requirements continues to grow. In June 2025, Connecticut and Oregon enacted significant amendments to their comprehensive consumer data privacy laws – joining Montana, Utah, Virginia and Colorado, all of which also made major revisions to their laws in 2025. This article examined some of the key changes introduced by the Connecticut and Oregon amendments, including a new and unique impact assessment obligation, privacy notice requirements, prohibitions on the sale of certain data types, and heightened protections for children and minors. With insights from McDermott Will & Emery, Hintze Law, Reed Smith and Orrick, it also provided practical compliance measures that companies should consider taking before the revised provisions go into effect.