| Alabama | Sales tax: 4% state rate plus local taxesPrivacy: Alabama Personal Data Protection Act (HB 351, enacted April 2026; effective 1 May 2027) |
|---|
| Alaska | Sales tax: No state sales tax; many municipalities levy local sales taxes (including on remote sellers)Privacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Arizona | Sales tax: 5.6% state transaction privilege tax (TPT) plus county and city taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Arkansas | Sales tax: 6.5% state rate plus local taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| California | Sales tax: 7.25% statewide base rate (including 1.25% mandatory local) plus local district taxesPrivacy: California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA effective 1 Jan 2020; CPRA amendments 1 Jan 2023; automated decision-making, risk-assessment and cybersecurity-audit regulations phasing in from 1 Jan 2026) |
|---|
| Colorado | Sales tax: 2.9% state rate plus county, special-district and home-rule city taxesPrivacy: Colorado Privacy Act (effective 1 Jul 2023) |
|---|
| Connecticut | Sales tax: 6.35% state rate; no local sales taxesPrivacy: Connecticut Data Privacy Act (effective 1 Jul 2023) |
|---|
| Delaware | Sales tax: No general sales tax (sellers pay a gross receipts tax)Privacy: Delaware Personal Data Privacy Act (effective 1 Jan 2025) |
|---|
| District of Columbia | Sales tax: 6% general sales tax (a scheduled rise to 7% was postponed to 1 Oct 2027)Privacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Florida | Sales tax: 6% state rate plus county discretionary surtaxesPrivacy: Florida Digital Bill of Rights (effective 1 Jul 2024), which applies only to very large businesses (over US$1 billion global revenue meeting further criteria); not usually counted as a comprehensive law |
|---|
| Georgia | Sales tax: 4% state rate plus local taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Hawaii | Sales tax: General excise tax (GET) of 4% on nearly all business receipts, plus a 0.5% county surchargePrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Idaho | Sales tax: 6% state rate (limited local resort taxes)Privacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Illinois | Sales tax: 6.25% state rate plus local and home-rule taxesPrivacy: No comprehensive state privacy law (sector laws apply, notably the Biometric Information Privacy Act) |
|---|
| Indiana | Sales tax: 7% state rate; no local sales taxesPrivacy: Indiana Consumer Data Protection Act (effective 1 Jan 2026) |
|---|
| Iowa | Sales tax: 6% state rate plus local option taxesPrivacy: Iowa Consumer Data Protection Act (effective 1 Jan 2025) |
|---|
| Kansas | Sales tax: 6.5% state rate plus local taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Kentucky | Sales tax: 6% state rate; no local sales taxesPrivacy: Kentucky Consumer Data Protection Act (effective 1 Jan 2026) |
|---|
| Louisiana | Sales tax: 5% state rate (raised from 4.45% on 1 Jan 2025) plus parish and local taxesPrivacy: Louisiana Data Privacy Act (enacted May 2026; effective 1 Jan 2027) |
|---|
| Maryland | Sales tax: 6% state rate; 3% rate on certain data, IT and software publishing services from 1 Jul 2025Privacy: Maryland Online Data Privacy Act (effective 1 Oct 2025, applying to processing from 1 Apr 2026) |
|---|
| Massachusetts | Sales tax: 6.25% state rate; no general local sales taxPrivacy: No comprehensive consumer privacy law in effect (a Massachusetts Consumer Data Privacy Act passed both chambers in differing versions in 2026; sector and data-security rules apply) |
|---|
| Michigan | Sales tax: 6% state rate; no local sales taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Minnesota | Sales tax: 6.875% state rate plus local taxesPrivacy: Minnesota Consumer Data Privacy Act (effective 31 Jul 2025) |
|---|
| Missouri | Sales tax: 4.225% state rate plus local taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Nebraska | Sales tax: 5.5% state rate plus local taxesPrivacy: Nebraska Data Privacy Act (effective 1 Jan 2025) |
|---|
| Nevada | Sales tax: 6.85% state rate plus county taxesPrivacy: No comprehensive state privacy law (sector laws apply, including Nevada's online privacy-notice and consumer health data laws) |
|---|
| New Jersey | Sales tax: 6.625% state rate; no general local sales tax (reduced rate in Urban Enterprise Zones)Privacy: New Jersey Data Privacy Act (effective 15 Jan 2025) |
|---|
| New Mexico | Sales tax: Gross receipts tax (GRT): 4.875% state rate plus local GRT, applied broadly including to most servicesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| New York | Sales tax: 4% state rate plus county and city taxes (8.875% combined in New York City)Privacy: No comprehensive state privacy law (sector laws apply; the SHIELD Act sets data-security and breach-notice rules) |
|---|
| North Carolina | Sales tax: 4.75% state rate plus county and transit taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Ohio | Sales tax: 5.75% state rate plus county and transit taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Oklahoma | Sales tax: 4.5% state rate plus local taxesPrivacy: Oklahoma Consumer Data Privacy Act (SB 546, enacted March 2026; effective 1 Jan 2027) |
|---|
| Oregon | Sales tax: No general sales taxPrivacy: Oregon Consumer Privacy Act (effective 1 Jul 2024) |
|---|
| Pennsylvania | Sales tax: 6% state rate (plus 1% in Allegheny County and 2% in Philadelphia)Privacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Puerto Rico | Sales tax: Sales and use tax (IVU) of 11.5% (10.5% Commonwealth plus 1% municipal), with a 4% rate on many B2B and designated professional servicesPrivacy: No comprehensive privacy law (sector and breach-notification laws apply) |
|---|
| Rhode Island | Sales tax: 7% state rate; no local sales taxesPrivacy: Rhode Island Data Transparency and Privacy Protection Act (effective 1 Jan 2026) |
|---|
| South Carolina | Sales tax: 6% state rate plus local taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| South Dakota | Sales tax: 4.2% state rate plus municipal taxes, with a broad base that includes many servicesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|
| Tennessee | Sales tax: 7% state rate plus local taxesPrivacy: Tennessee Information Protection Act (effective 1 Jul 2025) |
|---|
| Texas | Sales tax: 6.25% state rate plus local taxes up to 2%Privacy: Texas Data Privacy and Security Act (effective 1 Jul 2024) |
|---|
| Utah | Sales tax: 4.85% state rate (6.1% including mandatory statewide local add-ons) plus local option taxesPrivacy: Utah Consumer Privacy Act (effective 31 Dec 2023) |
|---|
| Virginia | Sales tax: 5.3% statewide (4.3% state plus 1% local) plus regional add-ons in some areasPrivacy: Virginia Consumer Data Protection Act (effective 1 Jan 2023) |
|---|
| Washington | Sales tax: 6.5% state rate plus local taxes; sales tax extended to certain IT and other services from 1 Oct 2025 (ESSB 5814)Privacy: No comprehensive state privacy law (the My Health My Data Act regulates consumer health data) |
|---|
| Wisconsin | Sales tax: 5% state rate plus county and local taxesPrivacy: No comprehensive state privacy law (sector laws apply) |
|---|