Which privacy laws apply to my business
Answer a few questions about your firm and see which laws reach it, and the threshold that triggered each.
Plain answers for a small firm that handles privacy without a privacy officer.
Start with a tool
Calculators, checklists and templates for GDPR, the CCPA and the state laws. They run in your browser and nothing you type is sent to us.
DSAR deadline calculator
Enter the date a request arrived and the law: get the due date, the extension and the confirm-by date.
Cookie banner checklist
Check your banner against GDPR, ePrivacy and the US opt-out rules, line by line.
Privacy policy checklist
Check your policy item by item against GDPR Art. 13/14 and the CCPA policy rules.
CCPA threshold calculator
Test your revenue, consumer count and data sales against the CCPA thresholds.
Global Privacy Control checker
See whether your browser sends the GPC signal and what a site must do when it does.
GDPR checklist for a small business
Work through the GDPR duties a small firm carries and print a dated record.
Notice at collection template
Build a CCPA notice at collection, with a GDPR short-notice variant.
DSAR response template
Build the reply to an access request: what you hold, why, who gets it and for how long.
Software, measured against the rules
Each comparison sets vendors against what the law requires, row by row, from the vendors’ own documentation. Verdicts are by use case.
Consent management platforms for a small US site
For a small site with EU and US visitors and one banner to run
Read the comparison: Consent management platforms for a small US site
Privacy policy generators that cover CCPA and GDPR
For a small site writing its first privacy policy
Read the comparison: Privacy policy generators that cover CCPA and GDPR
DSAR tools for a firm without a privacy team
For a firm answering requests by hand today
Read the comparison: DSAR tools for a firm without a privacy team
CCPA compliance software
For a firm that must meet the CCPA and the other state laws
GDPR compliance software for a small business
For a firm without a DPO working through GDPR
Read the comparison: GDPR compliance software for a small business
Google Analytics alternatives that need no cookie banner
For a site that wants traffic numbers without a consent prompt
Read the comparison: Google Analytics alternatives that need no cookie banner
In the order the work comes
- 01Which privacy laws apply to my business
Find which laws reach you
GDPR reaches some US firms; each state law has its own thresholds. Answer a few questions and see which apply and why.
- 02Privacy policy checklist
Put the notices and links in place
A privacy policy with the items the rules list, a notice where you collect data, and the opt-out link where one is owed.
- 03DSAR deadline calculator
Answer a request inside the deadline
Access, deletion and opt-out requests each run on a legal clock. Enter the date it arrived and get the date it is due.
Filed by question
Everything on the site is filed under one of 4 questions. Each folder holds its tools, guides and software comparisons together.
Consent and cookies
Cookie banners, consent records, consent-management platforms and analytics that need (or avoid) consent, under GDPR/ePrivacy and the US opt-out laws.
2 tools, 2 guides
7 comparisons
Notices and policies
The paperwork a firm must hold: privacy policy, notice at collection, cookie policy, retention policy, processor contracts, data maps, assessments and the checklists that list them.
8 tools, 1 guide
3 comparisons
Requests and opt-outs
Answering people: GDPR access and erasure requests, CCPA/state requests to know, delete and opt out, Global Privacy Control, the deadlines, and the tools that run the queue.
3 tools, 3 guides
4 comparisons
Which laws apply
Whether GDPR, the CCPA/CPRA or another state law reaches a firm: thresholds, scope, the state-by-state map and the software sold for each law.
2 tools, 13 guides
2 comparisons
Guides
The rules in plain words, with the article or section number beside every duty.