IN FORCE
| State Law Requirements | Iowa CDPA | CCPA/CPRA | CPA | CTDPA | VCDPA |
| In effect / Will be in effect | in force | in force | in force | in force | in force |
| Opt-in consent for certain types of data processing | yes | ||||
| Opt-out consent for certain types of data processing | yes | yes | yes | yes | yes |
| Must present users with a privacy policy (or notice) | yes | yes | yes | yes | yes |
| Requires Data Protection Assessments | yes | yes | yes | yes | |
| Outlines Contractual Obligation with Third-Party Processors | yes | yes | yes | yes | yes |
| Allows for civil lawsuits or private right of action | yes | ||||
| Must honor Global Privacy Controls/browser privacy settings | yes | yes | yes |
WILL BE IN FORCE
| State Law Requirements | UCPA | TDPSA | ODPA | MCDPA | DPDPA | TIPA | Indiana CDPA |
| In effect / Will be in effect | effective December 31, 2023 | effective January 1, 2024 | effective January 1, 2024 | effective October 1, 2024 | effective January 1, 2025 | effective January 1, 2025 | effective January 1, 2026 |
| Opt-in consent for certain types of data processing | yes | yes | |||||
| Opt-out consent for certain types of data processing | yes | yes | yes | yes | yes | yes | yes |
| Must present users with a privacy policy (or notice) | yes | yes | yes | yes | yes | yes | yes |
| Requires Data Protection Assessments | yes | yes | yes | yes | yes | yes | |
| Outlines Contractual Obligation with Third-Party Processors | yes | yes | yes | yes | yes | yes | yes |
| Allows for civil lawsuits or private right of action | |||||||
| Must honor Global Privacy Controls/browser privacy settings | yes | yes | yes | yes |
Comprehensive compliance starts with a Privacy Policy.
Comply with the law with our agreements, policies, and consent banners. Everything is included.
