On February 12, 2026, Ohio lawmakers made a significant move to protect the privacy of its residents by passing a new internet privacy law. The legislation, dubbed the Ohio Personal Data Protection Act (OPDPA), aims to safeguard personal data collected and used by online companies and social media platforms.Under the OPDPA, companies are required to obtain explicit consent from users before collecting or processing any personal information. This includes data such as names, addresses, financial information, browsing history, and location data. Companies must also provide users with the option to opt out of having their data collected and shared with third parties.The law also requires companies to implement robust security measures to protect personal data from unauthorized access and data breaches. Failure to comply with the OPDPA could result in fines of up to $1 million per violation.Ohio Governor Jane Smith hailed the new law as a crucial step in ensuring the privacy and security of Ohioans' personal information in the digital age. "With the rapid advancement of technology and the increasing reliance on the internet, it is imperative that we take proactive measures to protect our citizens' data," Governor Smith said in a statement.Privacy advocates and consumer rights groups have praised the OPDPA as a necessary safeguard against the growing threat of data breaches and online privacy violations. "This law represents a significant victory for consumers in Ohio, who deserve to have control over their personal information and how it is used by online companies," said John Doe, a spokesperson for the Ohio Privacy Rights Coalition.The OPDPA will go into effect on January 1, 2027, giving companies ample time to update their privacy policies and data protection practices to comply with the new law. Ohio joins a growing number of states that have enacted comprehensive internet privacy laws in recent years, signaling a wider push for stronger data protection regulations across the country.