US State Privacy Laws

A growing number of US states have enacted comprehensive privacy laws. Each has unique requirements for cookie consent, opt-out links, and data handling. Use these guides to understand what your website needs for each state.

StateLawModelBannerDNSGPC
CaliforniaCCPA/CPRAopt-outRec.YesYesView guide →
ColoradoCPAopt-outRec.YesYesView guide →
ConnecticutCTDPAopt-outRec.YesYesView guide →
DelawareDPDPAopt-outRec.YesNoView guide →
FloridaFDBRopt-outRec.YesNoView guide →
IndianaINCDPAopt-outRec.YesNoView guide →
IowaICDPAopt-outRec.YesNoView guide →
KentuckyKCDPAopt-outRec.YesNoView guide →
MarylandMODPAopt-outRec.YesNoView guide →
MinnesotaMNCDPAopt-outRec.YesNoView guide →
MontanaMCDPAopt-outRec.YesYesView guide →
NebraskaNDPAopt-outRec.YesNoView guide →
New HampshireNHPPAopt-outRec.YesNoView guide →
New JerseyNJDPAopt-outRec.YesNoView guide →
OregonOCPAopt-outRec.YesNoView guide →
Rhode IslandRIDPAopt-outRec.YesNoView guide →
TennesseeTIPAopt-outRec.YesNoView guide →
TexasTDPSAopt-outRec.YesYesView guide →
UtahUCPAopt-outRec.YesNoView guide →
VirginiaVCDPAopt-outRec.YesNoView guide →

DNS = Do Not Sell link · GPC = Global Privacy Control · Rec. = Recommended

State-by-State Guides

CaliforniaCCPA/CPRA

California Consumer Privacy Act / California Privacy Rights Act

Effective Jan 1, 2020opt-outGPC
Cookie banner·Do Not Sell·GPC guide
ColoradoCPA

Colorado Privacy Act

Effective Jul 1, 2023opt-outGPC
Cookie banner·Do Not Sell·GPC guide
ConnecticutCTDPA

Connecticut Data Privacy Act

Effective Jul 1, 2023opt-outGPC
Cookie banner·Do Not Sell·GPC guide
DelawareDPDPA

Delaware Personal Data Privacy Act

Effective Jan 1, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
FloridaFDBR

Florida Digital Bill of Rights

Effective Jul 1, 2024opt-out
Cookie banner·Do Not Sell·GPC guide
IndianaINCDPA

Indiana Consumer Data Protection Act

Effective Jan 1, 2026opt-out
Cookie banner·Do Not Sell·GPC guide
IowaICDPA

Iowa Consumer Data Protection Act

Effective Jan 1, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
KentuckyKCDPA

Kentucky Consumer Data Protection Act

Effective Jan 1, 2026opt-out
Cookie banner·Do Not Sell·GPC guide
MarylandMODPA

Maryland Online Data Privacy Act

Effective Oct 1, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
MinnesotaMNCDPA

Minnesota Consumer Data Privacy Act

Effective Jul 31, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
MontanaMCDPA

Montana Consumer Data Privacy Act

Effective Oct 1, 2024opt-outGPC
Cookie banner·Do Not Sell·GPC guide
NebraskaNDPA

Nebraska Data Privacy Act

Effective Jan 1, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
New HampshireNHPPA

New Hampshire Privacy Act

Effective Jan 1, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
New JerseyNJDPA

New Jersey Data Privacy Act

Effective Jan 15, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
OregonOCPA

Oregon Consumer Privacy Act

Effective Jul 1, 2024opt-out
Cookie banner·Do Not Sell·GPC guide
Rhode IslandRIDPA

Rhode Island Data Transparency and Privacy Protection Act

Effective Jan 1, 2026opt-out
Cookie banner·Do Not Sell·GPC guide
TennesseeTIPA

Tennessee Information Protection Act

Effective Jul 1, 2025opt-out
Cookie banner·Do Not Sell·GPC guide
TexasTDPSA

Texas Data Privacy and Security Act

Effective Jul 1, 2024opt-outGPC
Cookie banner·Do Not Sell·GPC guide
UtahUCPA

Utah Consumer Privacy Act

Effective Dec 31, 2023opt-out
Cookie banner·Do Not Sell·GPC guide
VirginiaVCDPA

Virginia Consumer Data Protection Act

Effective Jan 1, 2023opt-out
Cookie banner·Do Not Sell·GPC guide

Comply with every US state privacy law

LegalBanner automatically adapts to each state's requirements — cookie banners, opt-out links, GPC signals, and consent logging.