# US State Privacy Law Tracker — Status Report ## Report Information | Field | Value | |-------|-------| | **Report Date** | [YYYY-MM-DD] | | **Prepared By** | [Name, Title] | | **Reporting Period** | [Quarter / Month] | | **Organisation** | [Name] | ## Enacted Laws — Current Status | State | Law | Effective Date | Status | Compliance Status | Notes | |-------|-----|---------------|--------|-------------------|-------| | California | CCPA/CPRA | 1 Jan 2023 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Virginia | VCDPA | 1 Jan 2023 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Colorado | CPA | 1 Jul 2023 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Connecticut | CTDPA | 1 Jul 2023 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Utah | UCPA | 31 Dec 2023 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Texas | TDPSA | 1 Jul 2024 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Oregon | OCPA | 1 Jul 2024 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Montana | MCDPA | 1 Oct 2024 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Iowa | ICDPA | 1 Jan 2025 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Delaware | DPDPA | 1 Jan 2025 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | New Hampshire | NHPA | 1 Jan 2025 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | New Jersey | NJDPA | 15 Jan 2025 | Effective | [Compliant / In progress / Gap identified] | [Notes] | | Nebraska | NDPA | 1 Jan 2025 | Effective | [Compliant / In progress / Gap identified] | [Notes] | ## Upcoming Effective Dates | State | Law | Effective Date | Days Until Effective | Readiness Status | Action Required | |-------|-----|---------------|---------------------|-----------------|----------------| | [State] | [Law] | [Date] | [Days] | [Ready / In progress / Not started] | [Action items] | ## Pending Legislation of Interest | State | Bill Number | Title | Status | Probability | Impact Assessment | |-------|------------|-------|--------|------------|-------------------| | [State] | [Bill #] | [Short title] | [Introduced / Committee / Passed one chamber] | [High / Medium / Low] | [Significant / Moderate / Minimal] | ## Applicability Assessment | State Law | Applicable? | Basis | Consumers Processed | Revenue Threshold Met? | Data Sales Threshold? | |-----------|-------------|-------|--------------------|-----------------------|----------------------| | [Law] | [Yes / No / Under review] | [In-state business / Consumer volume / Data sales] | [Number] | [Y/N/NA] | [Y/N/NA] | ## Key Differences Requiring State-Specific Implementation | Requirement | States | Current Implementation | Gap | |-------------|--------|----------------------|-----| | Universal opt-out signal | CA, CO, CT, TX, MT, OR, DE, NH, NJ, MN, MD, VT | [Implemented / Partial / Not implemented] | [Gap description] | | Appeal right | VA, CO, CT, TX, OR and others | [Implemented / Partial / Not implemented] | [Gap description] | | Sensitive data opt-in consent | [States requiring opt-in] | [Implemented / Partial / Not implemented] | [Gap description] | | No cure period | CA, TX, OR, NJ, MD | [Risk assessed / Mitigation in place] | [Gap description] | ## Enforcement Activity This Period | State | Enforcement Type | Target | Allegation | Outcome | Relevance to Organisation | |-------|-----------------|--------|-----------|---------|--------------------------| | [State] | [CID / Enforcement action / Guidance] | [Company] | [Description] | [Ongoing / Settled / Fine] | [High / Medium / Low] | ## Action Items | Action | Owner | Due Date | Status | Priority | |--------|-------|----------|--------|----------| | [Action description] | [Name] | [YYYY-MM-DD] | [Open / In progress / Complete] | [Critical / High / Medium / Low] | --- *This tracker is maintained by the Privacy Team and updated at minimum quarterly or upon enactment of new legislation.*