# Regulatory Standards — Multi-State Compliance

## All Applicable State Privacy Laws

| State | Law | Citation | Effective |
|-------|-----|----------|-----------|
| California | CCPA/CPRA | Cal. Civ. Code §1798.100-199 | Jan 1, 2020/2023 |
| Virginia | VCDPA | Va. Code §59.1-575-585 | Jan 1, 2023 |
| Colorado | CPA | C.R.S. §6-1-1301-1313 | Jul 1, 2023 |
| Connecticut | CTDPA | Conn. Gen. Stat. §42-515-525 | Jul 1, 2023 |
| Texas | TDPSA | Tex. Bus. & Com. Code §541.001-203 | Jul 1, 2024 |
| Oregon | OCPA | ORS §646A.570-604 | Jul 1, 2024 |
| Montana | MTDPA | MCA §30-14-2801-2817 | Oct 1, 2024 |
| Kentucky | KPPA | KRS §367.401-445 | Jan 1, 2026 |

## Harmonized Applicability Thresholds

| State | Threshold 1 | Threshold 2 | Revenue Alt |
|-------|------------|-------------|-------------|
| California | 100,000 consumers/households | 50% revenue from sale | $25M revenue |
| Virginia | 100,000 consumers | 25,000 + 50% revenue | None |
| Colorado | 100,000 consumers | 25,000 + any revenue from sale | None |
| Connecticut | 100,000 consumers | 25,000 + 25% revenue | None |
| Texas | Non-SBA small business | N/A | None |
| Oregon | 100,000 consumers | 25,000 + 25% revenue | None |
| Montana | 50,000 consumers | 25,000 + 25% revenue | None |
| Kentucky | 100,000 consumers | 25,000 + 50% revenue | None |

## Cure Period Comparison

| State | Cure Period | Status |
|-------|-----------|--------|
| California | None | Eliminated by CPRA (Jan 2023) |
| Virginia | 30 days | Permanent |
| Colorado | 60 days | Expired Jan 1, 2025; AG discretion |
| Connecticut | 60 days | Expired Jan 1, 2025; AG discretion |
| Texas | 30 days | Permanent |
| Oregon | 14 days | Permanent |
| Montana | 60 days | Permanent |
| Kentucky | 30 days | Permanent |

## Enforcement Comparison

| State | Enforcement Body | Private Right of Action | Max Penalty/Violation |
|-------|-----------------|------------------------|----------------------|
| California | CPPA + AG | Yes (data breach only) | $7,500 |
| Virginia | AG only | No | $7,500 |
| Colorado | AG only | No | $20,000 |
| Connecticut | AG only | No | $5,000 |
| Texas | AG only | No | $7,500 |
| Oregon | AG only | No | $25,000 |
| Montana | AG only | No | Per Consumer Protection Act |
| Kentucky | AG only | No | $7,500 |