Which privacy laws apply to my business?
It depends on where your business is established, where the people whose data you handle live, and, for most US state laws, how many of them there are and how much of your revenue comes from selling data. Answer those questions and the check shows each law as applies, conditions to check, not yet in force, or not triggered.
We read 26 laws from their official texts or regulator pages (data verified 2026-10-06). Of the six core facts per law (what it covers, when it applies, in force from, notice, consent, rights), 5% could not be stated from the pages we read and are marked "not stated" rather than guessed. Nothing you enter is stored or sent.
Laws covered (26)
- Act on the Protection of Personal Information (Act No. 57 of 2003)
- California Consumer Privacy Act of 2018 as amended by the CPRA (Cal. Civ. Code 1798.100 et seq.) and the CPPA regulations — in force from 2020-01-01
- Colorado Privacy Act (C.R.S. 6-1-1301 et seq.) — in force from 2023-07-01
- Connecticut Data Privacy Act (Conn. Gen. Stat. 42-515 et seq., as amended by P.A. 25-113) — in force from 2023-07-01
- Delaware Personal Data Privacy Act (6 Del. C. ch. 12D) — in force from 2025-01-01
- Indiana Consumer Data Protection Act (Ind. Code 24-15) — in force from 2026-01-01
- Iowa Consumer Data Protection Act (Iowa Code ch. 715D) — in force from 2025-01-01
- Kentucky Consumer Data Protection Act (2024 Ky. Acts, HB 15, creating new sections of KRS Chapter 367) — in force from 2026-01-01
- Lei Geral de Protecao de Dados Pessoais (Lei 13.709/2018)
- Maryland Online Data Privacy Act of 2024 (Md. Code, Com. Law 14-4601 et seq.; 2024 Md. Laws ch. 455, SB 541)
- Minnesota Consumer Data Privacy Act (Minn. Stat. 325M.10 to 325M.21) — in force from 2025-07-31
- Montana Consumer Data Privacy Act (MCA Title 30, ch. 14, part 28) — in force from 2024-10-01
- Nebraska Data Privacy Act (LB 1074; Neb. Rev. Stat. 87-1101 to 87-1130) — in force from 2025-01-01
- New Hampshire privacy law, RSA chapter 507-H (Expectation of Privacy) — in force from 2025-01-01
- New Jersey Data Privacy Act (P.L. 2023, c. 266; N.J.S.A. 56:8-166.4 et seq.)
- Oregon Consumer Privacy Act (ORS 646A.570 et seq.) — in force from 2024-07-01
- Personal Information Protection and Electronic Documents Act (Canada, S.C. 2000, c. 5) — in force from 2001-01-01
- Privacy Act 1988 (Cth) and the Australian Privacy Principles
- Quebec Act respecting the protection of personal information in the private sector (CQLR c. P-39.1), as amended by Law 25 (2021, c. 25) — in force from 2023-09-22
- Regulation (EU) 2016/679 (General Data Protection Regulation) — in force from 2018-05-25
- Swiss Federal Act on Data Protection (FADP), SR 235.1, status as of 1 September 2023 — in force from 2023-09-01
- Tennessee Information Protection Act (Tenn. Code Ann. 47-18-3201 et seq., as enacted by Public Chapter 408 of 2023, HB 1181) — in force from 2025-07-01
- Texas Data Privacy and Security Act (Tex. Bus. & Com. Code ch. 541) — in force from 2024-07-01
- UK GDPR (Regulation (EU) 2016/679 as it forms part of UK law) and the Data Protection Act 2018
- Utah Consumer Privacy Act (Utah Code 13-61-101 et seq.) — in force from 2023-12-31
- Virginia Consumer Data Protection Act (Va. Code 59.1-575 et seq.) — in force from 2023-01-01
What we do not cover
A privacy question is often wider than the general laws listed here. These areas are outside this site, so no result says anything about them:
- Privacy laws for particular sectors (for example health care, banking and credit, education)
- Rules specific to children's online privacy
- Cookie and electronic-communications rules (including consent for cookies and marketing messages)
- Employee, job applicant and contractor data
- Rules on sending personal data to other countries
- US state data-breach notification laws (a separate set of state laws)
- US state privacy laws that are not yet in force, and state laws on particular topics (for example biometric or health data)
- Privacy laws of countries that are not listed here
- Planned changes to the laws listed here
Sources last re-read on 2026-10-06.