Consent Shield
50-State Law Matrix
Real-Time Statutory Intelligence Matrix

50-State US Privacy Law Intelligence Matrix

Real-time tracker of active enforcement, passed statutory deadlines, opt-out requirements, and Global Privacy Control (GPC) obligations.

Status Filters:
Obligation Filters:

Interactive Geographic US Map

Click any state tile to inspect statutory requirements
AK
ME
WA
ID
MT
ND
MN
IL
WI
MI
NY
VT
NH
OR
NV
WY
SD
IA
IN
OH
PA
NJ
MA
CT
CA★
UT
CO
NE
MO
KY
WV
VA
MD
DE
RI
AZ
NM
KS
AR
TN
NC
SC
HI
TX
LA
MS
AL
GA
FL
Strict / Private Right (2) Active Comprehensive (7) Passed / Enacting (10) Under Review (14)
★ California Selected
Selected State Intel

California (CCPA / CPRA)

Cal. Civ. Code § 1798.100 • Enforced by CPPA

ACTIVE ENFORCEMENT
Effective Date January 1, 2023
Universal GPC Opt-Out Mandatory Recognition
Private Right of Action Yes ($100-$750/consumer)
Statutory Penalty Cap Up to $7,500/violation

Statutory Applicability Thresholds:

• $25M+ Annual Gross Revenue, OR
• Buys/sells personal info of 100k+ consumers/households, OR
• Derives 50%+ annual revenue from selling/sharing personal data.

Mandatory Banner Requirements:

  • "Do Not Sell or Share My Personal Info" link
  • Global Privacy Control (GPC) Automated Opt-Out
  • Explicit Opt-In for Minors (<16 years)
  • Zero-Load Script Suppression on SPI Categories
Quick Remediation Code Generator:
<script src="https://consentshield.com/shield.js" data-geo="US-CA" async></script>

Comparative State Provisions Data Table

Full statutory breakdown across opt-outs, sensitive data rules, cure periods, and penalty ceilings.

State Statute Name Effective Date Universal GPC Opt-Out Sensitive Data Rules Cure Period Fines / Violation
CA CCPA / CPRA Jan 1, 2023 Mandatory Recognition Opt-Out / Limit SPI None (CPPA) Up to $7,500
TX TDPSA Jul 1, 2024 Mandatory (Jan 2025) Opt-In Mandatory 30 Days Up to $7,500
CO CPA Jul 1, 2023 Mandatory (Jul 2024) Opt-In Mandatory 60 Days Up to $20,000
VA VCDPA Jan 1, 2023 Opt-Out Link Opt-In Mandatory 30 Days Up to $7,500
CT CTDPA Jul 1, 2023 Mandatory (Jan 2025) Opt-In Mandatory 60 Days Up to $5,000
FL FDBR Jul 1, 2024 Opt-Out Link Opt-In Mandatory 45 Days Up to $50,000
WA My Health My Data Act Mar 31, 2024 Strict Opt-In Explicit Prior Opt-In None Private Right of Action