Which privacy laws apply to my business
Answer a few questions about your firm and see which laws reach it, and the threshold that triggered each.
Which laws apply
2 tools, 13 guides, 2 comparisons
Before any notice or banner, a firm needs to know which laws reach it. For a firm with no EU office, GDPR turns on whether you offer goods or services to people in the EU or monitor them there. The CCPA and the other state laws turn on revenue and on how many residents’ data you handle (Texas and Nebraska on whether you are a small business), and each state draws those lines differently.
The checker and the CCPA threshold calculator give a first answer in a few minutes. The guides then take one law at a time, from GDPR against the CCPA to the state-by-state table of comprehensive laws in force, with the enforcer and the cure period for each.
Tools
CCPA threshold calculator
Test your revenue, consumer count and data sales against the CCPA thresholds.
Guides
- GDPR vs CCPAScope, legal basis against opt-out, request rights, clocks and penalties, side by side.2026-10-23
- What is the CCPA?Who the California law covers, the rights it gives, the duties it sets and who enforces it.2026-10-23
- US state privacy lawsEach comprehensive state law in force: effective date, thresholds, cure period and enforcer.2026-10-23
- What is the CPRA?What the 2020 amendment added to the CCPA, from sensitive data to the CPPA.2026-10-23
- Does GDPR apply to US companies?Art. 3(2) in plain words: selling to people in the EU, monitoring them, and the EU representative rule.2026-10-23
- GDPR and AI tools: what a small firm must checkLegal basis, processor terms, training opt-outs and transfers before staff paste client data into AI.2026-10-23
- Texas Data Privacy and Security ActWho the Texas law covers, the small-business carve-out, the duties and AG enforcement.2026-10-23
- Virginia Consumer Data Protection ActVirginia's thresholds, consumer rights, data protection assessments and AG enforcement.2026-10-23
- Colorado Privacy ActColorado's thresholds, rights, universal opt-out rule and enforcement.2026-10-23
- Connecticut Data Privacy ActConnecticut's thresholds, consumer rights, duties and enforcement.2026-10-23
- Maryland Online Data Privacy ActMaryland's thresholds, its data-minimization rule, rights and enforcement.2026-10-23
- Oregon Consumer Privacy ActOregon's thresholds, consumer rights, duties and enforcement.2026-10-23
- CCPA penaltiesThe fine amounts, who enforces them, and what the published enforcement cases show.2026-10-23
Software compared
CCPA compliance software
For a firm that must meet the CCPA and the other state laws
GDPR compliance software for a small business
For a firm without a DPO working through GDPR
Read the comparison: GDPR compliance software for a small business
The other folders
- Consent and cookiesCookie banners, consent records, consent-management platforms and analytics that need (or avoid) consent, under GDPR/ePrivacy and the US opt-out laws.2 tools, 2 guides, 7 comparisons, 1 official list
- Notices and policiesThe paperwork a firm must hold: privacy policy, notice at collection, cookie policy, retention policy, processor contracts, data maps, assessments and the checklists that list them.8 tools, 1 guide, 3 comparisons
- Requests and opt-outsAnswering people: GDPR access and erasure requests, CCPA/state requests to know, delete and opt out, Global Privacy Control, the deadlines, and the tools that run the queue.3 tools, 3 guides, 4 comparisons, 1 official list