Tracks and monitors US state privacy legislation across all 50 states, DC, and territories. Covers enacted comprehensive privacy laws (California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and subsequent enactments), pending bills, effective dates, and key requirement differences. Keywords: state privacy law, CCPA, CPRA, VCDPA, CPA, CTDPA, UCPA, multi-state.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
설치 방법 보기설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.
The United States does not have a single comprehensive federal privacy law. Instead, a patchwork of state-level comprehensive privacy statutes has emerged since the California Consumer Privacy Act (CCPA) was enacted in 2018. As of early 2026, twenty states have enacted comprehensive consumer privacy laws, with additional states introducing legislation in each legislative session. This skill tracks the status of enacted laws, key provisions, effective dates, and substantive differences that drive multi-state compliance obligations.
| State | Law | Enacted | Effective | Enforcer |
|---|---|---|---|---|
| California | CCPA/CPRA | 2018/2020 | 1 Jan 2020 / 1 Jan 2023 | CPPA + AG |
| Virginia | VCDPA | 2021 | 1 Jan 2023 | AG |
| Colorado | CPA | 2021 | 1 Jul 2023 | AG |
| Connecticut | CTDPA | 2022 | 1 Jul 2023 | AG |
| Utah | UCPA | 2022 | 31 Dec 2023 | AG |
| Iowa | ICDPA | 2023 | 1 Jan 2025 | AG |
| Indiana | INCDPA | 2023 | 1 Jan 2026 | AG |
| Tennessee | TIPA | 2023 | 1 Jul 2025 | AG |
| Montana | MCDPA | 2023 | 1 Oct 2024 | AG |
| Texas | TDPSA | 2023 | 1 Jul 2024 | AG |
| Oregon | OCPA | 2023 | 1 Jul 2024 | AG |
| Delaware | DPDPA | 2023 | 1 Jan 2025 | AG |
| New Hampshire | NHPA | 2024 | 1 Jan 2025 | AG |
| New Jersey | NJDPA | 2024 | 15 Jan 2025 | AG |
| Nebraska | NDPA | 2024 | 1 Jan 2025 | AG |
| Minnesota | MCDPA | 2024 | 31 Jul 2025 | AG |
| Maryland | MODPA | 2024 | 1 Oct 2025 | AG |
| Rhode Island | RIDPA | 2024 | 1 Jan 2026 | AG |
| Kentucky | KCDPA | 2024 | 1 Jan 2026 | AG |
| Vermont | VDPA | 2024 | 1 Jul 2025 | AG |
States differ in what triggers applicability:
| Right | CA | VA | CO | CT | TX | OR | NJ | MD |
|---|---|---|---|---|---|---|---|---|
| Access | Y | Y | Y | Y | Y | Y | Y | Y |
| Delete | Y | Y | Y | Y | Y | Y | Y | Y |
| Correct | Y | Y | Y | Y | Y | Y | Y | Y |
| Portability | Y | Y | Y | Y | Y | Y | Y | Y |
| Opt-out of sale | Y | Y | Y | Y | Y | Y | Y | Y |
| Opt-out of targeted ads | Y | Y | Y | Y | Y | Y | Y | Y |
| Opt-out of profiling | N* | Y | Y | Y | Y | Y | Y | Y |
| Appeal right | N | Y | Y | Y | Y | Y | Y | Y |
| Private right of action | Y** | N | N | N | N | N | N | N |
*California CPRA provides limited automated decision-making rights via regulations **California PRA limited to data breaches involving specified personal information
States increasingly recognise universal opt-out signals:
This tracker is updated by reviewing:
아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.
로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.
아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.
Implements 42 CFR Part 2 protections for substance use disorder patient records. Covers written consent requirements stricter than HIPAA, re-disclosure prohibition, court order procedures, qualified service organization agreements, and 2024 amendments aligning Part 2 with HIPAA. Keywords: 42 CFR Part 2, substance use disorder, SUD records, re-disclosure, consent, Part 2 amendments.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implements age-gating mechanisms for online services to restrict access based on user age. Covers hard gates versus soft gates, neutral age prompts, re-verification triggers, circumvention prevention, and regulatory requirements under GDPR, COPPA, UK Online Safety Act, and DSA. Keywords: age gate, age restriction, neutral prompt, children, online services, access control.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Evaluates and implements age estimation and verification technologies for online services. Covers facial age estimation, digital ID verification, self-declaration with risk assessment, AI-based age estimation, and the accuracy versus privacy tradeoff. Includes ICO guidance and euCONSENT framework. Keywords: age verification, age estimation, facial analysis, digital ID, children, online safety.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Preparing EU AI Act compliance documentation for high-risk AI systems. Covers Annex III classification, technical documentation under Art. 11, conformity assessment, risk management systems, and CE marking requirements. Keywords: EU AI Act, high-risk AI, Annex III, conformity assessment, CE marking.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implements GDPR Art. 22 automated decision-making and AI Act Art. 14 human oversight requirements for AI systems. Covers identification of solely automated decisions, meaningful human intervention design, logic explanation mechanisms, and contestation procedures. Keywords: Art. 22, automated decision, human oversight, AI Act, profiling, contestation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.