*/ public static function all() { $r = array( 'US-CA' => array( 'region' => 'California', 'law' => 'California Consumer Privacy Act (CCPA/CPRA)', 'cite' => 'Cal. Civ. Code § 1798.100 et seq.', 'since' => '2020-01-01', 'summary' => __( 'California’s consumer privacy law. It gives California residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ California residents a year, or have revenue over $26.6 million.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Aug 14, 2020).', 'goconsent' ), __( 'Give notice and a way to opt out before using sensitive data.', 'goconsent' ), __( 'Update your privacy policy at least every 12 months.', 'goconsent' ), __( 'Explain loyalty and rewards programs (what data they use and what members get).', 'goconsent' ), ), 'url' => 'https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5', ), 'US-VA' => array( 'region' => 'Virginia', 'law' => 'Virginia Consumer Data Protection Act', 'cite' => 'Va. Code § 59.1-575 et seq.', 'since' => '2023-01-01', 'summary' => __( 'Virginia’s consumer privacy law. It gives Virginia residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Virginia residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/', ), 'US-CO' => array( 'region' => 'Colorado', 'law' => 'Colorado Privacy Act', 'cite' => 'Colo. Rev. Stat. § 6-1-1301 et seq.', 'since' => '2023-07-01', 'summary' => __( 'Colorado’s consumer privacy law. It gives Colorado residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Colorado residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jul 1, 2024).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), __( 'Explain loyalty and rewards programs (what data they use and what members get).', 'goconsent' ), ), 'url' => 'https://coag.gov/resources/colorado-privacy-act/', ), 'US-CT' => array( 'region' => 'Connecticut', 'law' => 'Connecticut Data Privacy Act', 'cite' => 'Conn. Gen. Stat. § 42-515 et seq.', 'since' => '2023-07-01', 'summary' => __( 'Connecticut’s consumer privacy law. It gives Connecticut residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 35,000+ Connecticut residents a year, or sell personal data, or handle any sensitive data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://portal.ct.gov/ag/sections/privacy/the-connecticut-data-privacy-act', ), 'US-UT' => array( 'region' => 'Utah', 'law' => 'Utah Consumer Privacy Act', 'cite' => 'Utah Code § 13-61-101 et seq.', 'since' => '2023-12-31', 'summary' => __( 'Utah’s consumer privacy law. It gives Utah residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses with revenue over $25 million that also handle data of 100,000+ Utah residents a year (or 25,000+ if they earn revenue from selling data).', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Give notice and a way to opt out before using sensitive data.', 'goconsent' ), ), 'url' => 'https://le.utah.gov/xcode/Title13/Chapter61/13-61.html', ), 'US-TX' => array( 'region' => 'Texas', 'law' => 'Texas Data Privacy and Security Act', 'cite' => 'Tex. Bus. & Com. Code § 541.001 et seq.', 'since' => '2024-07-01', 'summary' => __( 'Texas’s consumer privacy law. It gives Texas residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Any business that isn’t a “small business” under U.S. SBA size standards. Small businesses still need consent before selling sensitive data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights/texas-data-privacy-and-security-act', ), 'US-OR' => array( 'region' => 'Oregon', 'law' => 'Oregon Consumer Privacy Act', 'cite' => 'Or. Rev. Stat. § 646A.570 et seq.', 'since' => '2024-07-01', 'summary' => __( 'Oregon’s consumer privacy law. It gives Oregon residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Oregon residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2026).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.doj.state.or.us/consumer-protection/id-theft-data-breaches/privacy/', ), 'US-FL' => array( 'region' => 'Florida', 'law' => 'Florida Digital Bill of Rights', 'cite' => 'Fla. Stat. § 501.701 et seq.', 'since' => '2024-07-01', 'summary' => __( 'Florida’s consumer privacy law. It gives Florida residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Only very large companies (over $1 billion in revenue). Florida also requires any business that sells sensitive data to get consent and post a notice.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&URL=0500-0599/0501/0501PartVContentsIndex.html', ), 'US-MT' => array( 'region' => 'Montana', 'law' => 'Montana Consumer Data Privacy Act', 'cite' => 'Mont. Code § 30-14-2801 et seq.', 'since' => '2024-10-01', 'summary' => __( 'Montana’s consumer privacy law. It gives Montana residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 25,000+ Montana residents a year, or 15,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://leg.mt.gov/bills/mca/title_0300/chapter_0140/part_0280/sections_index.html', ), 'US-IA' => array( 'region' => 'Iowa', 'law' => 'Iowa Consumer Data Protection Act', 'cite' => 'Iowa Code ch. 715D', 'since' => '2025-01-01', 'summary' => __( 'Iowa’s consumer privacy law. It gives Iowa residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Iowa residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Give notice and a way to opt out before using sensitive data.', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.legis.iowa.gov/docs/code/715D.pdf', ), 'US-DE' => array( 'region' => 'Delaware', 'law' => 'Delaware Personal Data Privacy Act', 'cite' => 'Del. Code tit. 6, § 12D-101 et seq.', 'since' => '2025-01-01', 'summary' => __( 'Delaware’s consumer privacy law. It gives Delaware residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 10,000+ Delaware residents a year, or 5,000+ if they earn revenue from selling data. From Jan 1, 2027: 10,000 residents, or 5,000 if selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2026).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://delcode.delaware.gov/title6/c012d/index.html', ), 'US-NE' => array( 'region' => 'Nebraska', 'law' => 'Nebraska Data Privacy Act', 'cite' => 'Neb. Rev. Stat. § 87-1101 et seq.', 'since' => '2025-01-01', 'summary' => __( 'Nebraska’s consumer privacy law. It gives Nebraska residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Any business that isn’t a “small business” under U.S. SBA size standards. Small businesses still need consent before selling sensitive data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://nebraskalegislature.gov/laws/browse-chapters.php?chapter=87', ), 'US-NH' => array( 'region' => 'New Hampshire', 'law' => 'New Hampshire Privacy Act', 'cite' => 'N.H. Rev. Stat. ch. 507-H', 'since' => '2025-01-01', 'summary' => __( 'New Hampshire’s consumer privacy law. It gives New Hampshire residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 35,000+ New Hampshire residents a year, or 10,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.doj.nh.gov/bureaus/consumer-protection-antitrust/data-privacy', ), 'US-NJ' => array( 'region' => 'New Jersey', 'law' => 'New Jersey Data Privacy Act', 'cite' => 'N.J. Stat. § 56:8-166.4 et seq.', 'since' => '2025-01-15', 'summary' => __( 'New Jersey’s consumer privacy law. It gives New Jersey residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ New Jersey residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jul 15, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.njconsumeraffairs.gov/ocp/Pages/NJ-Data-Privacy-Act.aspx', ), 'US-TN' => array( 'region' => 'Tennessee', 'law' => 'Tennessee Information Protection Act', 'cite' => 'Tenn. Code § 47-18-3201 et seq.', 'since' => '2025-07-01', 'summary' => __( 'Tennessee’s consumer privacy law. It gives Tennessee residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses with revenue over $25 million that also handle data of 175,000+ Tennessee residents a year (or 25,000+ if they earn revenue from selling data).', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.tn.gov/attorneygeneral/working-for-tennessee/consumer/resources/materials/tennessee-information-protection-act.html', ), 'US-MN' => array( 'region' => 'Minnesota', 'law' => 'Minnesota Consumer Data Privacy Act', 'cite' => 'Minn. Stat. § 325M.10 et seq.', 'since' => '2025-07-31', 'summary' => __( 'Minnesota’s consumer privacy law. It gives Minnesota residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Minnesota residents a year, or 25,000+ if they earn revenue from selling data. Small businesses (SBA standards) are exempt, except they need consent to sell sensitive data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jul 31, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.ag.state.mn.us/Data-Privacy/', ), 'US-MD' => array( 'region' => 'Maryland', 'law' => 'Maryland Online Data Privacy Act', 'cite' => 'Md. Code, Com. Law § 14-4701 et seq.', 'since' => '2025-10-01', 'summary' => __( 'Maryland’s consumer privacy law. It gives Maryland residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 35,000+ Maryland residents a year, or 10,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Oct 1, 2025).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.marylandattorneygeneral.gov/Pages/CPD/MODPA.aspx', ), 'US-IN' => array( 'region' => 'Indiana', 'law' => 'Indiana Consumer Data Protection Act', 'cite' => 'Ind. Code § 24-15', 'since' => '2026-01-01', 'summary' => __( 'Indiana’s consumer privacy law. It gives Indiana residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Indiana residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://iga.in.gov/laws/2025/ic/titles/24#24-15', ), 'US-KY' => array( 'region' => 'Kentucky', 'law' => 'Kentucky Consumer Data Protection Act', 'cite' => 'Ky. Rev. Stat. § 367.3611 et seq.', 'since' => '2026-01-01', 'summary' => __( 'Kentucky’s consumer privacy law. It gives Kentucky residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Kentucky residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://apps.legislature.ky.gov/law/statutes/chapter.aspx?id=39099', ), 'US-RI' => array( 'region' => 'Rhode Island', 'law' => 'Rhode Island Data Transparency and Privacy Protection Act', 'cite' => 'R.I. Gen. Laws § 6-48.1-1 et seq.', 'since' => '2026-01-01', 'summary' => __( 'Rhode Island’s consumer privacy law. It gives Rhode Island residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 35,000+ Rhode Island residents a year, or 10,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://webserver.rilegislature.gov/Statutes/TITLE6/6-48.1/INDEX.htm', ), 'US-OK' => array( 'region' => 'Oklahoma', 'law' => 'Oklahoma Consumer Data Privacy Act (SB 546)', 'cite' => 'SB 546 (2026)', 'since' => '2027-01-01', 'summary' => __( 'Oklahoma’s consumer privacy law. It gives Oklahoma residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 100,000+ Oklahoma residents a year, or 25,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.mayerbrown.com/en/insights/publications/2026/03/oklahoma-enacts-comprehensive-consumer-data-privacy-law', ), 'US-LA' => array( 'region' => 'Louisiana', 'law' => 'Louisiana Consumer Privacy Act (SB 386)', 'cite' => 'SB 386 (2026)', 'since' => '2027-01-01', 'summary' => __( 'Louisiana’s consumer privacy law. It gives Louisiana residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 75,000+ Louisiana residents a year, or have revenue over $25 million.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2027).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://www.troutmanprivacy.com/2026/06/louisiana-enacts-consumer-data-privacy-law/', ), 'US-AL' => array( 'region' => 'Alabama', 'law' => 'Alabama Personal Data Protection Act (HB 351)', 'cite' => 'HB 351 (2026)', 'since' => '2027-05-01', 'summary' => __( 'Alabama’s consumer privacy law. It gives Alabama residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 25,000+ Alabama residents a year. Exempt: businesses under 500 employees that don’t sell personal data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), ), 'url' => 'https://www.hunton.com/privacy-and-cybersecurity-law-blog/alabama-becomes-21st-state-with-comprehensive-consumer-privacy-law', ), 'US-VT' => array( 'region' => 'Vermont', 'law' => 'Vermont Data Privacy and Online Surveillance Act (Act 145)', 'cite' => 'Act 145 (2026)', 'since' => '2028-01-01', 'summary' => __( 'Vermont’s consumer privacy law. It gives Vermont residents rights over their personal data and sets rules for businesses that meet its size limits.', 'goconsent' ), 'applies' => __( 'Businesses that handle data of 35,000+ Vermont residents a year, or 3,000+ if they earn revenue from selling data.', 'goconsent' ), 'asks' => array( __( 'A privacy notice explaining what you collect, why, who you share it with and how people use their rights.', 'goconsent' ), __( 'Let people access, delete and correct their data, and opt out of targeted ads and the sale of their data.', 'goconsent' ), __( 'Honor Global Privacy Control as an opt-out (from Jan 1, 2028).', 'goconsent' ), __( 'Get opt-in consent before using sensitive data (health, precise location, children’s data and more).', 'goconsent' ), __( 'Offer an appeal when you turn down a privacy request.', 'goconsent' ), ), 'url' => 'https://legislature.vermont.gov/bill/status/2026/S.71', ), 'CALOPPA' => array( 'region' => 'California', 'law' => 'California Online Privacy Protection Act (CalOPPA)', 'cite' => 'Cal. Bus. & Prof. Code §§ 22575–22579', 'since' => '2004-07-01', 'summary' => __( 'California’s website privacy policy law. Applies to any website that collects personal information from California residents, whatever the business size.', 'goconsent' ), 'applies' => __( 'Any website or online service that collects personal information from California residents.', 'goconsent' ), 'asks' => array( __( 'Post a privacy policy, linked clearly from the homepage.', 'goconsent' ), __( 'List the kinds of personal data collected and the kinds of third parties it’s shared with.', 'goconsent' ), __( 'Say how the site responds to “Do Not Track” and similar browser signals, and whether other companies (ads, analytics, maps) collect data across sites.', 'goconsent' ), __( 'Show the policy’s effective date and explain how changes are announced.', 'goconsent' ), ), 'url' => 'https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?lawCode=BPC&division=8.&chapter=22.&part=&article=', ), 'DOPPA' => array( 'region' => 'Delaware', 'law' => 'Delaware Online Privacy and Protection Act (DOPPA)', 'cite' => 'Del. Code tit. 6, § 1205C', 'since' => '2016-01-01', 'summary' => __( 'Delaware’s website privacy policy law, similar to California’s CalOPPA. Applies to any website that collects personal data from Delaware residents.', 'goconsent' ), 'applies' => __( 'Any website or online service that collects personal information from Delaware residents.', 'goconsent' ), 'asks' => array( __( 'Post a privacy policy that’s easy to find.', 'goconsent' ), __( 'List the kinds of data collected and the kinds of third parties it’s shared with.', 'goconsent' ), __( 'Say how the site responds to “Do Not Track” and whether other companies collect data across sites.', 'goconsent' ), __( 'Show the policy’s effective date.', 'goconsent' ), ), 'url' => 'https://delcode.delaware.gov/title6/c012c/index.html', ), 'NV603A' => array( 'region' => 'Nevada', 'law' => 'Nevada online privacy notice law (NRS 603A)', 'cite' => 'Nev. Rev. Stat. §§ 603A.300–.360', 'since' => '2017-10-01', 'summary' => __( 'Nevada’s website privacy notice law. Applies to websites that collect personal information from Nevada residents.', 'goconsent' ), 'applies' => __( 'Website operators that collect personal information from Nevada residents (small Nevada-based sites with under 20,000 visitors a year are exempt).', 'goconsent' ), 'asks' => array( __( 'Post a privacy notice listing the data collected and the third parties it’s shared with.', 'goconsent' ), __( 'Show the notice’s effective date and how people can review and correct their data.', 'goconsent' ), __( 'Give a designated address (email, form or phone) where people can opt out of the sale of their data.', 'goconsent' ), ), 'url' => 'https://www.leg.state.nv.us/nrs/nrs-603a.html', ), 'WA_MHMDA' => array( 'region' => 'Washington', 'law' => 'Washington My Health My Data Act', 'cite' => 'RCW 19.373', 'since' => '2024-03-31', 'summary' => __( 'Washington’s consumer health data law. Covers health-related data of any kind, held by businesses of any size, with a private right to sue.', 'goconsent' ), 'applies' => __( 'Any business that collects consumer health data from Washington residents, regardless of size (health, wellness, and any business that keeps health notes such as allergies).', 'goconsent' ), 'asks' => array( __( 'Publish a Consumer Health Data Privacy Policy and link it prominently from the homepage.', 'goconsent' ), __( 'Get consent before collecting or sharing consumer health data; signed authorization before selling it.', 'goconsent' ), __( 'Let people see, delete and withdraw consent for their health data; offer an appeal.', 'goconsent' ), __( 'Don’t geofence near health care facilities.', 'goconsent' ), ), 'url' => 'https://app.leg.wa.gov/RCW/default.aspx?cite=19.373&full=true', ), 'NV_SB370' => array( 'region' => 'Nevada', 'law' => 'Nevada consumer health data law (SB 370)', 'cite' => 'Nev. Rev. Stat. ch. 603A (SB 370, 2023)', 'since' => '2024-03-31', 'summary' => __( 'Nevada’s consumer health data law, similar to Washington’s. Applies to businesses of any size that handle consumer health data.', 'goconsent' ), 'applies' => __( 'Any business that collects consumer health data from Nevada residents.', 'goconsent' ), 'asks' => array( __( 'Publish a consumer health data privacy policy.', 'goconsent' ), __( 'Get consent before collecting or sharing consumer health data; written authorization before selling it.', 'goconsent' ), __( 'Let people see and delete their health data.', 'goconsent' ), __( 'Don’t geofence near health care facilities.', 'goconsent' ), ), 'url' => 'https://www.leg.state.nv.us/nrs/nrs-603a.html', ), 'CT_CHD' => array( 'region' => 'Connecticut', 'law' => 'Connecticut consumer health data rules', 'cite' => 'Conn. Gen. Stat. § 42-515 et seq.', 'since' => '2023-07-01', 'summary' => __( 'Connecticut’s privacy act also protects consumer health data. Since July 2026 the whole act applies to any business that handles health data.', 'goconsent' ), 'applies' => __( 'Any business that processes consumer health data of Connecticut residents.', 'goconsent' ), 'asks' => array( __( 'Get consent before processing or selling consumer health data.', 'goconsent' ), __( 'Limit employee and contractor access to health data.', 'goconsent' ), __( 'Don’t geofence near health care facilities.', 'goconsent' ), ), 'url' => 'https://portal.ct.gov/ag/sections/privacy/the-connecticut-data-privacy-act', ), 'COPPA' => array( 'region' => 'United States', 'law' => 'Children’s Online Privacy Protection Act (COPPA)', 'cite' => '15 U.S.C. § 6501; 16 C.F.R. Part 312', 'since' => '2000-04-21', 'summary' => __( 'Federal law protecting children under 13 online. The FTC’s updated rule has been in force since June 2025 (compliance deadline April 22, 2026).', 'goconsent' ), 'applies' => __( 'Websites aimed at children under 13, or that know they collect data from children under 13.', 'goconsent' ), 'asks' => array( __( 'Get verifiable parental consent before collecting a child’s personal data; separate consent before sharing it with third parties.', 'goconsent' ), __( 'Post a children’s privacy notice naming who collects children’s data.', 'goconsent' ), __( 'Keep a written data security program and data retention policy.', 'goconsent' ), __( 'Let parents review and delete their child’s data.', 'goconsent' ), ), 'url' => 'https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa', ), 'GLBA' => array( 'region' => 'United States', 'law' => 'Gramm-Leach-Bliley Act (GLBA) privacy and safeguards rules', 'cite' => '15 U.S.C. § 6801; 16 C.F.R. Parts 313–314', 'since' => '2001-07-01', 'summary' => __( 'Federal law for businesses that provide financial products or services, such as lending, mortgage brokering, tax prep and dealer financing.', 'goconsent' ), 'applies' => __( 'Financial institutions in a broad sense, including mortgage brokers, lenders, settlement services and dealers that arrange financing.', 'goconsent' ), 'asks' => array( __( 'Give customers a privacy notice explaining what financial data you share and their right to opt out.', 'goconsent' ), __( 'Run a written information security program (FTC Safeguards Rule).', 'goconsent' ), __( 'Report certain data breaches to the FTC.', 'goconsent' ), ), 'url' => 'https://www.ftc.gov/business-guidance/resources/ftc-safeguards-rule-what-your-business-needs-know', ), 'GDPR' => array( 'region' => 'European Union', 'law' => 'EU GDPR + ePrivacy cookie rules', 'cite' => 'Regulation (EU) 2016/679; Directive 2002/58/EC Art. 5(3)', 'since' => '2018-05-25', 'summary' => __( 'The EU’s data protection law. Reaches businesses outside the EU that offer goods or services to people in the EU or track their behavior.', 'goconsent' ), 'applies' => __( 'Businesses that target or monitor people in the EU, wherever the business is based.', 'goconsent' ), 'asks' => array( __( 'Get opt-in consent before non-essential cookies; rejecting must be as easy as accepting.', 'goconsent' ), __( 'State a lawful basis for each use of personal data in the privacy notice.', 'goconsent' ), __( 'Respect access, deletion, correction, portability and objection requests within one month.', 'goconsent' ), __( 'Non-EU businesses may need an EU representative.', 'goconsent' ), ), 'url' => 'https://eur-lex.europa.eu/eli/reg/2016/679/oj', ), 'UK_GDPR' => array( 'region' => 'United Kingdom', 'law' => 'UK GDPR + PECR (Data (Use and Access) Act 2025)', 'cite' => 'UK GDPR; PECR 2003 reg. 6', 'since' => '2021-01-01', 'summary' => __( 'The UK’s data protection and cookie rules. Since Feb 5, 2026, website analytics and preference cookies no longer need consent if people can easily object.', 'goconsent' ), 'applies' => __( 'Businesses that target or monitor people in the UK.', 'goconsent' ), 'asks' => array( __( 'Opt-in consent for advertising cookies; analytics allowed with clear notice and an easy way to object.', 'goconsent' ), __( 'State a lawful basis for each use of personal data.', 'goconsent' ), __( 'Have a way to handle data protection complaints (from June 19, 2026).', 'goconsent' ), __( 'Respond to rights requests within one month.', 'goconsent' ), ), 'url' => 'https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/', ), 'PIPEDA' => array( 'region' => 'Canada', 'law' => 'PIPEDA (and Quebec Law 25)', 'cite' => 'S.C. 2000, c. 5', 'since' => '2001-01-01', 'summary' => __( 'Canada’s federal private-sector privacy law; Quebec’s Law 25 adds stricter rules, including consent for tracking technologies.', 'goconsent' ), 'applies' => __( 'Businesses with a real and substantial connection to Canada, such as serving Canadian customers.', 'goconsent' ), 'asks' => array( __( 'Get meaningful consent for collecting and using personal data; express consent for sensitive data and online tracking for ads.', 'goconsent' ), __( 'Explain your privacy practices in plain language.', 'goconsent' ), __( 'Name a person responsible for privacy and let people access and correct their data.', 'goconsent' ), ), 'url' => 'https://www.priv.gc.ca/en/privacy-topics/collecting-personal-information/consent/gl_omc_201805/', ), ); return apply_filters( 'goconsent_law_reference', $r ); } }