State privacy laws of the United States Compliance Solution
CCPA, CPRA, CPA, VCDPA, UCPA, COPPA.
What are the State privacy laws of the United States?
- CCPA: California Consumer Privacy Act, learn more at CCPA
- CPRA: California Privacy Rights Act, learn more at CPRA
- CPA: Colorado Privacy Act, learn more at CPA
- VCDPA: Virginia Consumer Data Protection Act, learn more at VCDPA
- UCPA: Utah Consumer Privacy Act, learn more at UCPA
- CTDPA: Connecticut Data Protection Act, learn more at CTDPA
- COPPA: Children’s Online Privacy Protection Act, learn more at COPPA
What are the differences between different State privacy laws of the United States
| CCPA | VCDPA | UCPA | CPA | |
|---|---|---|---|---|
| California Consumer Privacy Act | Virginia Consumer Data Protection Act | Utah Consumer Privacy Act | Colorado Privacy Act | |
| Revenue requirements | >= $25 million in revenue without additional criteria | None | >= $25 million in revenue and meet additional criteria | None |
| Aggregated or deidentified data | Only deidentified data | Only deidentified data | Both | Only deidentified data |
| Definition of a “sale” of data | If data is exchanged, that is a sale. | If data is exchanged, that is a sale. | Requires money to be exchanged | If data is exchanged, that is a sale. |
| Opt-in or opt-out rights for PII or targeted advertising | Opt out | Opt out | Opt out | Opt out |
| Opt-in or opt-out rights for sensitive data | Opt out; Opt-in consent for a known child (COPPA) | Opt in; Opt-in for a known child (COPPA) | Opt out | Opt in |
| Consumers can appeal a business’s decision not to provide information | Yes | Yes | No | Yes |
| Consumers have the right to opt out | Yes | Yes | No | Some |
| Consumers can request that inaccuracies in their data are corrected | Yes | Yes | No | Yes |
| Requirements for the controller’s process for consumer requests | Yes | Yes | No | Yes |
| Consumers have the right to be deleted | Yes | Yes | Yes | Yes |
| Consumer can sue a business directly | Yes | No | No | No |
State privacy laws of the United States Compliance Solution
- CCPA: California Consumer Privacy Act, learn more at CCPA Compliance Solution
- CPRA: California Privacy Rights Act, learn more at CPRA Compliance Solution
- CPA: Colorado Privacy Act, learn more at CPA Compliance Solution
- VCDPA: Virginia Consumer Data Protection Act, learn more at VCDPA Compliance Solution
- UCPA: Utah Consumer Privacy Act, learn more at UCPA Compliance Solution
- COPPA: Children’s Online Privacy Protection Act, learn more at COPPA Compliance Solution
Upcomig state privacy laws in the US
- Connecticut Data Privacy Act - effective July 1, 2023
- Michigan Consumer Privacy Act (Personal Data Privacy Act)
- New Jersey Disclosure and Accountability Transparency Act
- Ohio Personal Privacy Act
- Pennsylvania Consumer Data Privacy Act (Consumer Data Protection Act)
- Alaska Consumer Data Privacy Act (Alaska Consumer Information Protection Act)
- Florida Privacy Protection Act
- Georgia Computer Data Privacy Act
- Hawaii Consumer Privacy Act
- Louisiana Consumer Privacy Act
- Maine Consumer Privacy Act
- Massachusetts Information Privacy and Security Act
- Minnesota Consumer Data Privacy Act
- Mississippi Consumer Data Privacy Act
- Nebraska Uniform Personal Data Protection Act
- New York Privacy Act
- North Carolina Consumer Privacy Act
- Oklahoma Uniform Personal Data Protection Act
- Rhode Island Information Privacy Act
- Washington Privacy Act (Washington Foundational Data Privacy Act)
- West Virginia
- Wisconsin
- Vermont
- Kentucky
- Iowa
- Indiana
- Arizona
Consumer privacy rights in the US
- Right of access
- Right of rectification
- Right of deletion
- Right of restriction
- Right of portability
- Right to opt-out of sales
- Right against automated decision making
- Private right of action
Business obligations for consumer privacy rights
- Opt-in default (requirement age)
- Notice/transparency requirement
- Risk assessments
- Prohibition on discrimination (exercising rights)
- Purpose/processing limitation
Personally Identifiable Information (PII)
- Biometric information
- Credit and debit card numbers
- Drivers’ license and license plate numbers
- Email addresses
- Employment information
- Financial data
- Healthcare and insurance information
- Mailing addresses
- Military ID numbers
- Passport ID numbers
- Passwords
- Physical addresses
- Social Security Numbers
- Student ID numbers
- Telephone numbers
- Usernames
Sensitive personal information
- Racial or ethnic origin
- Religious beliefs
- Mental or physical health condition or diagnosis
- Sex life or sexual orientation
- Citizenship or citizenship status
- Genetic or biometric data that may be processed for the purpose of uniquely identifying an individual
- A known child
How to compliant with and implement the US State Privacy Laws Compliance Solution?
Use a consent management platform like UniConsent to offer consumers full control of data collection, opt-out features, manage the preferences communication.
Comply With Global Privacy Regulations
Trusted by 5000+ of global publishers and marketers
Get started to make your website and application compliant for EU GDPR, US CPRA, CA PIPEDA etc
Sign up