Free Tool

US State Privacy Law Tracker

Every comprehensive state consumer privacy law, with effective dates, opt-out rules, and which ones require honoring the Global Privacy Control.

Filter by status or search for your state, then select a state name for its full guide. Counts include Florida (whose law covers only large tech) and Vermont (effective 2028); trackers that exclude one or both report 22 to 23 enacted. This is a plain-English summary for orientation, not legal advice. Go deeper in the US state privacy guides.

Showing 24 of 24 comprehensive state laws.

State	Law	Effective	Sensitive Data	Private Action
California	CCPA/CPRA	Jan 1, 2020	Opt-out (limit use)	Yes (breach only)
Virginia	VCDPA	Jan 1, 2023	Opt-in consent	No
Colorado	CPA	Jul 1, 2023	Opt-in consent	No
Connecticut	CTDPA	Jul 1, 2023	Opt-in consent	No
Utah	UCPA	Dec 31, 2023	Opt-out (notice)	No
Texas	TDPSA	Jul 1, 2024	Opt-in consent	No
Oregon	OCPA	Jul 1, 2024	Opt-in consent	No
Florida	FDBR	Jul 1, 2024	Opt-in consent	No
Montana	MCDPA	Oct 1, 2024	Opt-in consent	No
Delaware	DPDPA	Jan 1, 2025	Opt-in consent	No
Iowa	ICDPA	Jan 1, 2025	Opt-out (notice)	No
Nebraska	NDPA	Jan 1, 2025	Opt-in consent	No
New Hampshire	NHPA	Jan 1, 2025	Opt-in consent	No
New Jersey	NJDPA	Jan 15, 2025	Opt-in consent	No
Tennessee	TIPA	Jul 1, 2025	Opt-in consent	No
Minnesota	MNCDPA	Jul 31, 2025	Opt-in consent	No
Maryland	MODPA	Oct 1, 2025	Opt-in consent	No
Indiana	INCDPA	Jan 1, 2026	Opt-in consent	No
Kentucky	KCDPA	Jan 1, 2026	Opt-in consent	No
Rhode Island	RIDTPPA	Jan 1, 2026	Opt-in consent	No
Louisiana	LDPA	Jan 1, 2027	Opt-in consent	No
Oklahoma	OCDPA	Jan 1, 2027	Opt-in consent	No
Alabama	APDPA	May 1, 2027	Opt-in consent	No
Vermont	VDPOSA	Jan 1, 2028	Opt-in consent	No

California

CCPA/CPRA

Jan 1, 2020

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-out (limit use)
Private Action: Yes (breach only)

Virginia

VCDPA

Jan 1, 2023

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Colorado

CPA

Jul 1, 2023

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Connecticut

CTDPA

Jul 1, 2023

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Utah

UCPA

Dec 31, 2023

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-out (notice)
Private Action: No

Texas

TDPSA

Jul 1, 2024

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Oregon

OCPA

Jul 1, 2024

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Florida

FDBR

Jul 1, 2024

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Montana

MCDPA

Oct 1, 2024

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Delaware

DPDPA

Jan 1, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Iowa

ICDPA

Jan 1, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-out (notice)
Private Action: No

Nebraska

NDPA

Jan 1, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

New Hampshire

NHPA

Jan 1, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

New Jersey

NJDPA

Jan 15, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Tennessee

TIPA

Jul 1, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Minnesota

MNCDPA

Jul 31, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Maryland

MODPA

Oct 1, 2025

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Indiana

INCDPA

Jan 1, 2026

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Kentucky

KCDPA

Jan 1, 2026

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Rhode Island

RIDTPPA

Jan 1, 2026

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Louisiana

LDPA

Jan 1, 2027

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Oklahoma

OCDPA

Jan 1, 2027

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Alabama

APDPA

May 1, 2027

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Vermont

VDPOSA

Jan 1, 2028

Opt Out of Sale/Share
Opt Out of Targeted Ads
Honors GPC
Profiling Opt-Out
Sensitive Data: Opt-in consent
Private Action: No

Get Started

Honor GPC and State Opt-Outs Automatically

Concord's consent banner adapts to each visitor's region, honors Global Privacy Control and keeps consent records, so you can keep up as state laws change.

One Unified Platform for Privacy, Trust, & Compliance