State privacy laws of the United States Compliance Solution

CCPA, CPRA, CPA, VCDPA, UCPA, COPPA.

US States Privacy Laws

What are the State privacy laws of the United States?

  • CCPA: California Consumer Privacy Act, learn more at CCPA
  • CPRA: California Privacy Rights Act, learn more at CPRA
  • CPA: Colorado Privacy Act, learn more at CPA
  • VCDPA: Virginia Consumer Data Protection Act, learn more at VCDPA
  • UCPA: Utah Consumer Privacy Act, learn more at UCPA
  • CTDPA: Connecticut Data Protection Act, learn more at CTDPA
  • COPPA: Children’s Online Privacy Protection Act, learn more at COPPA

What are the differences between different State privacy laws of the United States

CCPAVCDPAUCPACPA
California Consumer Privacy ActVirginia Consumer Data Protection ActUtah Consumer Privacy ActColorado Privacy Act
Revenue requirements>= $25 million in revenue without additional criteriaNone>= $25 million in revenue and meet additional criteriaNone
Aggregated or deidentified dataOnly deidentified dataOnly deidentified dataBothOnly deidentified data
Definition of a “sale” of dataIf data is exchanged, that is a sale.If data is exchanged, that is a sale.Requires money to be exchangedIf data is exchanged, that is a sale.
Opt-in or opt-out rights for PII or targeted advertisingOpt outOpt outOpt outOpt out
Opt-in or opt-out rights for sensitive dataOpt out; Opt-in consent for a known child (COPPA)Opt in; Opt-in for a known child (COPPA)Opt outOpt in
Consumers can appeal a business’s decision not to provide informationYesYesNoYes
Consumers have the right to opt outYesYesNoSome
Consumers can request that inaccuracies in their data are correctedYesYesNoYes
Requirements for the controller’s process for consumer requestsYesYesNoYes
Consumers have the right to be deletedYesYesYesYes
Consumer can sue a business directlyYesNoNoNo

State privacy laws of the United States Compliance Solution

Upcomig state privacy laws in the US

  • Connecticut Data Privacy Act - effective July 1, 2023
  • Michigan Consumer Privacy Act (Personal Data Privacy Act)
  • New Jersey Disclosure and Accountability Transparency Act
  • Ohio Personal Privacy Act
  • Pennsylvania Consumer Data Privacy Act (Consumer Data Protection Act)
  • Alaska Consumer Data Privacy Act (Alaska Consumer Information Protection Act)
  • Florida Privacy Protection Act
  • Georgia Computer Data Privacy Act
  • Hawaii Consumer Privacy Act
  • Louisiana Consumer Privacy Act
  • Maine Consumer Privacy Act
  • Massachusetts Information Privacy and Security Act
  • Minnesota Consumer Data Privacy Act
  • Mississippi Consumer Data Privacy Act
  • Nebraska Uniform Personal Data Protection Act
  • New York Privacy Act
  • North Carolina Consumer Privacy Act
  • Oklahoma Uniform Personal Data Protection Act
  • Rhode Island Information Privacy Act
  • Washington Privacy Act (Washington Foundational Data Privacy Act)
  • West Virginia
  • Wisconsin
  • Vermont
  • Kentucky
  • Iowa
  • Indiana
  • Arizona

Consumer privacy rights in the US

  • Right of access
  • Right of rectification
  • Right of deletion
  • Right of restriction
  • Right of portability
  • Right to opt-out of sales
  • Right against automated decision making
  • Private right of action

Business obligations for consumer privacy rights

  • Opt-in default (requirement age)
  • Notice/transparency requirement
  • Risk assessments
  • Prohibition on discrimination (exercising rights)
  • Purpose/processing limitation

Personally Identifiable Information (PII)

  • Biometric information
  • Credit and debit card numbers
  • Drivers’ license and license plate numbers
  • Email addresses
  • Employment information
  • Financial data
  • Healthcare and insurance information
  • Mailing addresses
  • Military ID numbers
  • Passport ID numbers
  • Passwords
  • Physical addresses
  • Social Security Numbers
  • Student ID numbers
  • Telephone numbers
  • Usernames

Sensitive personal information

  • Racial or ethnic origin
  • Religious beliefs
  • Mental or physical health condition or diagnosis
  • Sex life or sexual orientation
  • Citizenship or citizenship status
  • Genetic or biometric data that may be processed for the purpose of uniquely identifying an individual
  • A known child

How to compliant with and implement the US State Privacy Laws Compliance Solution?

Use a consent management platform like UniConsent to offer consumers full control of data collection, opt-out features, manage the preferences communication.

Comply With Global Privacy Regulations

IAB registered consent manager for GDPRIAB TCF V2 registered consent manager for GDPRIAB TCF Canada registered consent managerGoogle-certified CMP
Trusted by 5000+ of global publishers and marketers
  • sej
  • football365
  • sharethrough
  • districtm
  • pf1
  • tower cast

Get started to make your website and application compliant for EU GDPR, US CPRA, CA PIPEDA etc

Sign up