| State Law Requirements | Iowa CDPA | CCPA/CPRA | CPA | CTDPA | DPDPA | FDBR | Indiana CDPA | MCDPA | ODPA | TIPA | TDPSA | UCPA | VCDPA |
| In effect / Will be in effect | in force | in force | in force | in force | effective January 1, 2025 | effective July 1, 2024 | effective January 1, 2026 | effective October 1, 2024 | effective January 1, 2024 | effective January 1, 2025 | effective January 1, 2024 | effective December 31, 2023 | in force |
| Opt-in consent for certain types of data processing | yes | yes | yes | ||||||||||
| Opt-out consent for certain types of data processing | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
| Must present users with a privacy policy (or notice) | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
| Requires Data Protection Assessments | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
| Requires Data Protection Assessments | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | ||
| Outlines Contractual Obligation with Third-Party Processors | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
| Allows for civil lawsuits or private right of action | yes | ||||||||||||
| Must honor Global Privacy Controls/browser privacy settings | yes | yes | yes | yes | yes | yes | yes | yes |
Comprehensive compliance starts with a Privacy Policy.
Comply with the law with our agreements, policies, and consent banners. Everything is included.
