跳到正文
cccskills
免费在 GitHub 公开

state-law-tracker

Tracks and monitors US state privacy legislation across all 50 states, DC, and territories. Covers enacted comprehensive privacy laws (California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and subsequent enactments), pending bills, effective dates, and key requirement differences. Keywords: state privacy law, CCPA, CPRA, VCDPA, CPA, CTDPA, UCPA, multi-state.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills
查看安装方法

包含的文件（5）

  • SKILL.md5.1 KB
  • assets/template.md4.0 KB
  • references/standards.md3.8 KB
  • references/workflows.md6.3 KB
  • scripts/process.py15.7 KB

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

US State Privacy Law Tracker

Overview

The United States does not have a single comprehensive federal privacy law. Instead, a patchwork of state-level comprehensive privacy statutes has emerged since the California Consumer Privacy Act (CCPA) was enacted in 2018. As of early 2026, twenty states have enacted comprehensive consumer privacy laws, with additional states introducing legislation in each legislative session. This skill tracks the status of enacted laws, key provisions, effective dates, and substantive differences that drive multi-state compliance obligations.

Enacted Comprehensive State Privacy Laws

StateLawEnactedEffectiveEnforcer
CaliforniaCCPA/CPRA2018/20201 Jan 2020 / 1 Jan 2023CPPA + AG
VirginiaVCDPA20211 Jan 2023AG
ColoradoCPA20211 Jul 2023AG
ConnecticutCTDPA20221 Jul 2023AG
UtahUCPA202231 Dec 2023AG
IowaICDPA20231 Jan 2025AG
IndianaINCDPA20231 Jan 2026AG
TennesseeTIPA20231 Jul 2025AG
MontanaMCDPA20231 Oct 2024AG
TexasTDPSA20231 Jul 2024AG
OregonOCPA20231 Jul 2024AG
DelawareDPDPA20231 Jan 2025AG
New HampshireNHPA20241 Jan 2025AG
New JerseyNJDPA202415 Jan 2025AG
NebraskaNDPA20241 Jan 2025AG
MinnesotaMCDPA202431 Jul 2025AG
MarylandMODPA20241 Oct 2025AG
Rhode IslandRIDPA20241 Jan 2026AG
KentuckyKCDPA20241 Jan 2026AG
VermontVDPA20241 Jul 2025AG

Key Compliance Variables Across States

Applicability Thresholds

States differ in what triggers applicability:

  • Revenue threshold: California (USD 25 million gross revenue) is the only state with a revenue trigger
  • Consumer volume: Most states use 100,000 consumers; Texas uses 50,000 (if revenue derived from data sales); Montana uses 50,000 (total population consideration)
  • Revenue from data sales: Most states apply if 25% or more of revenue comes from selling personal data (for businesses processing 25,000+ consumers)

Consumer Rights Comparison

RightCAVACOCTTXORNJMD
AccessYYYYYYYY
DeleteYYYYYYYY
CorrectYYYYYYYY
PortabilityYYYYYYYY
Opt-out of saleYYYYYYYY
Opt-out of targeted adsYYYYYYYY
Opt-out of profilingN*YYYYYYY
Appeal rightNYYYYYYY
Private right of actionY**NNNNNNN

*California CPRA provides limited automated decision-making rights via regulations **California PRA limited to data breaches involving specified personal information

Cure Period Variations

  • 30-day cure: Virginia, Utah, Iowa, Indiana, Tennessee, Kentucky
  • 60-day cure: Colorado (expires 1 Jan 2025), Connecticut (expires 31 Dec 2024)
  • No cure period: California (CPPA discretion), Texas, Oregon, New Jersey, Maryland
  • AG discretion: Several states allow AG to determine cure appropriateness

Universal Opt-Out Mechanism

States increasingly recognise universal opt-out signals:

  • Required: California (CPRA regulations), Colorado, Connecticut, Texas, Montana, Oregon, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Vermont
  • Not required: Virginia, Utah, Iowa, Indiana, Tennessee, Kentucky

Monitoring Methodology

This tracker is updated by reviewing:

  1. National Conference of State Legislatures (NCSL) privacy legislation database
  2. International Association of Privacy Professionals (IAPP) state law comparison tool
  3. Individual state legislature bill tracking systems
  4. Attorney General enforcement announcements

Integration Points

  • state-law-applicability: Uses tracker data to determine which state laws apply to a specific organisation
  • multi-state-compliance: Operationalises tracker data into a unified compliance programme
  • universal-opt-out: Implements technical mechanisms required by states mandating GPC/universal opt-out
  • ccpa-consumer-requests: California-specific consumer request handling
  • vcdpa-compliance: Virginia-specific compliance operations
  • texas-tdpsa-compliance: Texas-specific compliance operations

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护，适用 Google 的隐私权政策和服务条款。

同一仓库的技能

42-cfr-part-2

免费

Implements 42 CFR Part 2 protections for substance use disorder patient records. Covers written consent requirements stricter than HIPAA, re-disclosure prohibition, court order procedures, qualified service organization agreements, and 2024 amendments aligning Part 2 with HIPAA. Keywords: 42 CFR Part 2, substance use disorder, SUD records, re-disclosure, consent, Part 2 amendments.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

adequacy-assessment

免费

Guides assessment of third-country adequacy decisions under GDPR Article 45 for international data transfers. Covers the current EC adequacy decisions list, adequacy assessment criteria, partial adequacy handling, and monitoring of adequacy decision reviews. Keywords: adequacy decision, Article 45, third country, adequate protection, EC adequacy list.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

age-gating-services

免费

Implements age-gating mechanisms for online services to restrict access based on user age. Covers hard gates versus soft gates, neutral age prompts, re-verification triggers, circumvention prevention, and regulatory requirements under GDPR, COPPA, UK Online Safety Act, and DSA. Keywords: age gate, age restriction, neutral prompt, children, online services, access control.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

age-verification-methods

免费

Evaluates and implements age estimation and verification technologies for online services. Covers facial age estimation, digital ID verification, self-declaration with risk assessment, AI-based age estimation, and the accuracy versus privacy tradeoff. Includes ICO guidance and euCONSENT framework. Keywords: age verification, age estimation, facial analysis, digital ID, children, online safety.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

ai-act-high-risk-docs

免费

Preparing EU AI Act compliance documentation for high-risk AI systems. Covers Annex III classification, technical documentation under Art. 11, conformity assessment, risk management systems, and CE marking requirements. Keywords: EU AI Act, high-risk AI, Annex III, conformity assessment, CE marking.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

ai-automated-decisions

免费

Implements GDPR Art. 22 automated decision-making and AI Act Art. 14 human oversight requirements for AI systems. Covers identification of solely automated decisions, meaningful human intervention design, logic explanation mechanisms, and contestation procedures. Keywords: Art. 22, automated decision, human oversight, AI Act, profiling, contestation.

中文简介正在准备中。当前显示原文说明。

mukul975/Privacy-Data-Protection-Skills3162026年3月17日 更新

查看 mukul975 的全部技能

报告此技能的问题