Privacy laws, in plain English
The 35 privacy laws GoConsent checks your site against: who each one covers, what it asks of a website, and when it starts.
Last reviewed October 26, 2026. Summaries, not legal advice.
US state consumer privacy laws
Comprehensive privacy laws that apply above a size threshold. Most require an opt-out of targeted advertising and the sale of data, and many require honoring Global Privacy Control.
- California California Consumer Privacy Act (CCPA/CPRA) In effect since January 1, 2020
- Virginia Virginia Consumer Data Protection Act In effect since January 1, 2023
- Colorado Colorado Privacy Act In effect since July 1, 2023
- Connecticut Connecticut Data Privacy Act In effect since July 1, 2023
- Utah Utah Consumer Privacy Act In effect since December 31, 2023
- Texas Texas Data Privacy and Security Act In effect since July 1, 2024
- Oregon Oregon Consumer Privacy Act In effect since July 1, 2024
- Florida Florida Digital Bill of Rights In effect since July 1, 2024
- Montana Montana Consumer Data Privacy Act In effect since October 1, 2024
- Iowa Iowa Consumer Data Protection Act In effect since January 1, 2025
- Delaware Delaware Personal Data Privacy Act In effect since January 1, 2025
- Nebraska Nebraska Data Privacy Act In effect since January 1, 2025
- New Hampshire New Hampshire Privacy Act In effect since January 1, 2025
- New Jersey New Jersey Data Privacy Act In effect since January 15, 2025
- Tennessee Tennessee Information Protection Act In effect since July 1, 2025
- Minnesota Minnesota Consumer Data Privacy Act In effect since July 31, 2025
- Maryland Maryland Online Data Privacy Act In effect since October 1, 2025
- Indiana Indiana Consumer Data Protection Act In effect since January 1, 2026
- Kentucky Kentucky Consumer Data Protection Act In effect since January 1, 2026
- Rhode Island Rhode Island Data Transparency and Privacy Protection Act In effect since January 1, 2026
- Oklahoma Oklahoma consumer data privacy law (SB 546) Starts January 1, 2027
- Louisiana Louisiana Consumer Privacy Act (SB 386) Starts January 1, 2027
- Alabama Alabama Personal Data Protection Act (HB 351) Starts May 1, 2027
- Vermont Vermont Data Privacy and Online Surveillance Act (Act 145) Starts January 1, 2028
Website privacy notice laws
Laws that require almost any website collecting personal information from residents to post a privacy policy, whatever its size.
Consumer health data laws
Laws for any business that collects health-related data, with no size threshold.
US federal laws
Federal rules for children’s data and financial institutions.
International laws
Laws for businesses that serve people in the EU, the UK and Canada.
See which laws likely apply to you
GoConsent works it out from where you are, who you serve and your industry, then checks your site against them.
