Privacy compliance guides
19 guides and 2 official lists
GDPR, the CCPA as the CPRA amended it, and the state laws that followed, explained for a firm where privacy is one job among many. Every duty carries its article or section number, so you can check the rule itself.
The state-law guides cover each statute on its own terms: who it reaches, what it asks, who enforces it. When you need to act on one, the free tools turn the guide into a checklist or a date.
Consent and cookies
- Is Google Analytics GDPR compliant?What EU regulators decided, what the Data Privacy Framework changed and the consent GA4 still needs.2026-10-23
- Cookie banner examplesBanner patterns that meet the consent rules, and the ones regulators have objected to.2026-10-23
- Google-certified CMPsGoogle's own list of consent platforms certified for personalised ads in the EEA, UK and Switzerland.Official list
Notices and policies
Requests and opt-outs
- What is a DSAR?What a data subject access request is, what you must send back, and the CCPA equivalent.2026-10-23
- The "Do Not Sell or Share" linkWhen a site needs the link, what counts as selling or sharing, and how GPC changes it.2026-10-23
- What is a data protection officer?When GDPR requires a DPO, what the role does, and when an outside DPO fits.2026-10-23
- California data broker registryThe CPPA's official data broker list, what registration means and the Delete Act mechanism.Official list
Which laws apply
- GDPR vs CCPAScope, legal basis against opt-out, request rights, clocks and penalties, side by side.2026-10-23
- What is the CCPA?Who the California law covers, the rights it gives, the duties it sets and who enforces it.2026-10-23
- US state privacy lawsEach comprehensive state law in force: effective date, thresholds, cure period and enforcer.2026-10-23
- What is the CPRA?What the 2020 amendment added to the CCPA, from sensitive data to the CPPA.2026-10-23
- Does GDPR apply to US companies?Art. 3(2) in plain words: selling to people in the EU, monitoring them, and the EU representative rule.2026-10-23
- GDPR and AI tools: what a small firm must checkLegal basis, processor terms, training opt-outs and transfers before staff paste client data into AI.2026-10-23
- Texas Data Privacy and Security ActWho the Texas law covers, the small-business carve-out, the duties and AG enforcement.2026-10-23
- Virginia Consumer Data Protection ActVirginia's thresholds, consumer rights, data protection assessments and AG enforcement.2026-10-23
- Colorado Privacy ActColorado's thresholds, rights, universal opt-out rule and enforcement.2026-10-23
- Connecticut Data Privacy ActConnecticut's thresholds, consumer rights, duties and enforcement.2026-10-23
- Maryland Online Data Privacy ActMaryland's thresholds, its data-minimization rule, rights and enforcement.2026-10-23
- Oregon Consumer Privacy ActOregon's thresholds, consumer rights, duties and enforcement.2026-10-23
- CCPA penaltiesThe fine amounts, who enforces them, and what the published enforcement cases show.2026-10-23