New data privacy laws in Tennessee, Indiana, Montana, and Iowa put these states on par with Connecticut, Colorado, Virginia, Utah and Texas; all of them have new data privacy laws which, among other things, require affirmative opt-in and consent before you can use someone's email address, such as adding it to a mailing list or using it for targeted advertising. It's important to understand that this doesn't just apply to businesses which are headquartered in those states; in at least some of these states their law also applies to anyone doing business with someone in their state.
