In July 2021, the Uniform Law Commission (ULC) approved and recommended for enactment in all states the Uniform Personal Data Protection Act (UPDPA).1 This was formerly discussed at ULC as the Collection and Use of Personally Identifiable Data Act (CUPID Act).2 The UPDPA, when finalized, will serve as a model law which state legislatures can introduce and adopt governing how corporations can use information about individuals. At this time, the UPDPA is final as far as substance goes. It is still subject to stylistic revisions3 and should be finalized by January 2022. At that time, the UPDPA will be ready to be introduced to state legislatures for potential adoption. In light of current internet trends for web companies to gather large amounts of information on users, states have begun regulating privacy, and the UPDPA is an attempt to facilitate standardization across states.