Nov 3, 2026
Florida Digital Bill of Rights (FDBR): An Overview
The Florida Digital Bill of Rights (FDBR) has applied since July 1, 2024. Its full duties reach only companies with more than USD 1 billion in global revenue that meet a business-model test, but its sensitive data sale rule reaches any for-profit business operating in Florida. This guide covers who must comply, consumer rights, children’s data, and enforcement.
Nov 2, 2026
Colorado Privacy Act (CPA): An Overview
The Colorado Privacy Act (CPA) has applied since July 1, 2023, and it now carries added duties for minors’ data, biometric identifiers, and precise geolocation. Colorado’s general cure period ended on January 1, 2025, so enforcement can begin without a warning. This guide helps businesses understand who must comply, what consumers can request, and how penalties work.
Nov 2, 2026
Texas Data Privacy and Security Act (TDPSA): An Overview
The Texas Data Privacy and Security Act (TDPSA), signed on June 18, 2023, is the tenth comprehensive U.S. state privacy law. It has applied since July 1, 2024, covers most businesses that are not small businesses, and has no consumer-count threshold. This overview covers who must comply, consumer rights, requirements, and enforcement.
Oct 30, 2026
Consent Management Platforms Compared (2026): Which Hold Up in Enforcement and Litigation?
An enterprise buyer’s guide to consent management platforms, built around one question: can your consent record hold up when a regulator or plaintiff’s attorney asks? It compares Usercentrics, Ketch, Didomi/Sourcepoint, OneTrust, Osano, and Transcend on seven criteria, including U.S. state law depth, litigation-ready audit trails, AI governance, TCF v2.4, app and CTV consent, and DSR handling.
Oct 30, 2026
Virginia Consumer Data Protection Act (VCDPA): An Overview
The Virginia Consumer Data Protection Act (VCDPA), signed on March 2, 2021, was the second comprehensive U.S. state privacy law. It has applied since January 1, 2023, and amendments have since added protections for children’s data and, from July 1, 2026, a ban on selling precise geolocation data. This overview covers who the law applies to, consumer rights, sensitive data, and enforcement.
Oct 27, 2026
Delaware Personal Data Privacy Act (DPDPA): An Overview
The Delaware Personal Data Privacy Act (DPDPA), signed on September 11, 2023, is the twelfth comprehensive U.S. state privacy law. It took effect on January 1, 2025, and House Bill 380 expands its scope from January 1, 2027. This overview covers who the law applies to, consumer rights, sensitive data, opt-out signals, and enforcement.
Oct 27, 2026
Iowa Consumer Data Protection Act (ICDPA): An Overview
The Iowa Consumer Data Protection Act (ICDPA) has been in effect since January 1, 2025. It gives Iowa residents four data rights and relies on notice and opt-out, which makes it one of the lighter-touch U.S. state privacy laws. This guide covers who must comply, consumer rights, controller duties, and enforcement, including the 90-day cure period.
Oct 27, 2026
Montana Consumer Data Privacy Act (MTCDPA): An Overview
The Montana Consumer Data Privacy Act (MTCDPA) took effect on October 1, 2024, and SB 297 amended it effective October 1, 2025. The amendments lowered applicability thresholds, added duties for minors’ data, removed the cure period, and introduced civil penalties of up to USD 7,500 per violation.
Oct 27, 2026
Oregon Consumer Privacy Act (OCPA): An Overview
The Oregon Consumer Privacy Act (OCPA), in effect since July 1, 2024, sets rules for how businesses collect, share, and protect Oregon residents’ personal data. Amendments that took effect on January 1, 2026 added a universal opt-out requirement, ended the mandatory cure period, and tightened protections for minors and precise geolocation data.
Oct 22, 2026
Utah Consumer Privacy Act (UCPA): An Overview
The Utah Consumer Privacy Act (UCPA) gives Utah residents the right to access, delete, correct, and obtain a copy of their personal data, and to opt out of its sale or use for targeted advertising. This overview covers who must comply, what controllers must do, how the law is enforced, and recent changes, including the right to correct that took effect July 1, 2026.
Oct 21, 2026
California Consumer Privacy Act (CCPA): An Overview
The California Consumer Privacy Act (CCPA), in effect since 2020 and expanded by the CPRA, governs how covered businesses collect, use, sell, and share Californians' personal information. This guide explains who must comply, what rights consumers hold, and what businesses must do, including the 2026 rules on automated decision-making, risk assessments, and cybersecurity audits, and the SB 923 changes taking effect in 2027.
Oct 21, 2026
California Privacy Law in 2026: CPRA Enforcement, New Rules, and What to Do Now
The California Privacy Rights Act (CPRA) amended the California Consumer Privacy Act (CCPA), and two regulators now enforce it with fines and settlements that reach into the millions of dollars. New rules on opt-out signals, automated decision-making, deletion requests, and website tracking lawsuits take effect in 2027.
Oct 20, 2026
Connecticut Data Privacy Act (CTDPA): An Overview
The Connecticut Data Privacy Act (CTDPA) governs how businesses collect, process, and sell Connecticut residents’ personal data. This guide covers thresholds, consumer rights, consent, and enforcement, including the 2026 amendments (PA 25-113 and SB 4) on profiling, minors, geolocation, and surveillance pricing.
Oct 8, 2026
FSCA and WESCA: The Florida and Pennsylvania Wiretapping Laws Catching Website Owners Off Guard
If your website has visitors in Florida or Pennsylvania, two old wiretapping laws, FSCA and WESCA, which are similar to California’s CIPA, may already apply to the tracking pixels, chat tools, and analytics scripts running on your site. This guide breaks down what each law covers, what's driving the current wave of lawsuits, and the practical steps that reduce your risk.
Oct 1, 2026
Usercentrics Launches CIPA Template to Address Growing Wave of Website Tracking Lawsuits
CIPA demand letters are targeting websites implementing tracking technologies that fire before visitors provide consent. The new Usercentrics CIPA Template applies a geotargeted, opt-in consent configuration for California visitors within the existing Web CMP, automatically blocking such technologies until affirmative consent is given.
Oct 1, 2026
California Invasion of Privacy Act (CIPA): An Overview
Originally a 1967 wiretapping law, CIPA is now central to a surge of U.S. privacy litigation targeting websites that deploy cookies, pixels, and session replay tools without prior user consent. We look at CIPA's legal framework, key sections, how it differs from the CCPA, compliance, penalties, and how a consent management platform can reduce exposure.
Oct 1, 2026
Electronic Communications Privacy Act (ECPA): An Overview
The Electronic Communications Privacy Act (ECPA) is a federal wiretap law enacted in 1986. Like CIPA, it was originally designed to protect telephone and computer communications from interception. It is now widely used in class action litigation targeting website tracking technologies. This article explains the law, its three titles, and how businesses can manage exposure.
Oct 1, 2026
Received a CIPA Demand Letter? Here Is What It Means and What to Do Next
Oct 1, 2026
The Video Privacy Protection Act (VPPA) Explained
The Video Privacy Protection Act (VPPA) was passed in 1988 to protect video rental history and viewing data. Today, its application extends to online video platforms like streaming services. Learn how US courts are interpreting the law and what steps to take for your business to comply.
Oct 1, 2026
CIPA Legislation Is Now Law — And You Can Still Get Sued
Aug 7, 2026
New Hampshire Privacy Act: What the NHPA Means for Businesses
The New Hampshire Privacy Act (NHPA) is New Hampshire's comprehensive data privacy law, in effect since January 1, 2025. It gives residents rights to access, correct, delete, and port their data, plus the right to opt out of data sales, targeted advertising, and profiling. It applies to businesses meeting set consumer-data thresholds and is enforced by the Attorney General.
Jul 23, 2026
Vermont Data Privacy and Online Surveillance Act (VDPOSA): An Overview
The Vermont Data Privacy and Online Surveillance Act (VDPOSA) makes Vermont the 23rd U.S. state with a comprehensive privacy law. This guide covers applicability thresholds, consumer rights, the AI training disclosure requirement, opt-out preference signals, and enforcement, with comparisons to the models in effect in other states.
Jun 24, 2026
Louisiana Data Privacy Act (LDPA): Everything U.S. Businesses Need to Know
Jun 17, 2026
California Opt Me Out Act: A Guide for Website Owners
Jun 2, 2026
Alabama Personal Data Protection Act (APDPA): An Overview
The Alabama Personal Data Protection Act (APDPA), enacted through HB 351 in April 2026, establishes consumer rights over personal data and corresponding obligations for businesses processing data of Alabama residents. The law takes effect May 1, 2027 and includes notable distinctions around its applicability thresholds, sale definition, consent revocation, teen data protections, and cure period.
May 15, 2026
Oklahoma Consumer Data Privacy Act: What U.S. Businesses Need to Know
The Oklahoma Consumer Data Privacy Act takes effect January 1, 2027, bringing opt-out requirements for data sales and targeted advertising, affirmative consent for sensitive data, and AG-only enforcement with a permanent cure period. Oklahoma’s obligations closely track Virginia and Texas frameworks—but its narrower “sale” definition and absence of GPC support create specific operational considerations to address before the effective date.
May 15, 2026
What to Know About the California Privacy Protection Agency (CPPA)
The California Privacy Protection Agency, now publicly known as CalPrivacy, is California’s privacy watchdog. The Agency has broad powers to audit businesses, enforce privacy law, and shape regulations. This article explains what it does, why it matters, and what businesses need to know to avoid penalties and fines as enforcement ramps up.
May 15, 2026
CCPA Privacy Policy Requirements and Template
California's privacy laws set a high bar with obligations for businesses that handle consumer data. This guide covers everything your CCPA/CPRA privacy policy must include, making sure it stays up to date, and what it takes to stay on the right side of the enforcement.
May 13, 2026
California Age-Appropriate Design Code (CAADC): Business Guide
California's Age-Appropriate Design Code Act (CAADC) brings core obligations that include privacy by default, data minimization, dark pattern restrictions, and impact assessments for children's data. Businesses that handle data from minors need to understand what the CAADC requires, where it stands legally, and what companion obligations are already in force.
Apr 27, 2026
PII Compliance Checklist: 8 Steps to Protect User Data in 2026
Collecting personally identifiable Information (PII) from users is the backbone of data analytics in most organizations. Depending on the business purpose, PII ranging from email addresses to health records can help deliver services, build relationships, and enable more personalized experiences. This guide provides a PII compliance checklist to help you protect user data and avoid regulatory fines from global data privacy regulations.
Apr 2, 2026
Age Verification Compliance: Regulations, Risks, and What Businesses Must Do Now
Age verification requirements are expanding rapidly across the U.S. and in a growing number of countries globally. This article covers the key regulations, the cost of non-compliance — including fines, criminal liability, and reputational damage — and how businesses can build an auditable, defensible age verification process.
Mar 27, 2026
CPPA Enforcement Is Escalating: The Legal and Financial Risks U.S. Businesses Face Now
CalPrivacy's enforcement apparatus has expanded dramatically: a new Audits Division, automated website scanning, the nine-state Consortium of Privacy Regulators, and a deterrence-first penalty philosophy. For U.S. businesses, the risk is no longer theoretical as investigations can open without warning, and fixing a violation before agency contact doesn't guarantee avoiding a fine. Learn about the 10 areas driving enforcement.
Feb 11, 2025
Understanding the New York SHIELD Act
The New York SHIELD Act affects any business handling New York state residents' private information. With specific security requirements, breach notification deadlines, and new protected data categories from March 2025, businesses worldwide must understand their obligations.
Oct 11, 2024
Health Insurance Portability and Accountability Act (HIPAA): An overview
The Health Insurance Portability and Accountability Act (HIPAA) is a US federal law that came into effect in 1996. It covers collection, use, and security requirements for protected health information in healthcare and healthcare insurance industries.