Consumer Data Privacy: State Law Comparison Charts

Summary

These charts compare enacted comprehensive consumer data privacy laws in California, Virginia, Colorado, Utah, and Connecticut. These laws include the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100 et seq.; the Virginia Consumer Data Protection Act (VCDPA), Va. Code Ann. § 59.1-575 et seq.; the Colorado Privacy Act (CPA), C.R.S. 6-1-1301 et seq.; the Utah Consumer Privacy Act (UCPA), Utah Code Ann. § 13-61-101 et seq.; and the Connecticut Data Privacy Act (CTDPA), 2022 Ct. S.B. 6. While there are more similarities than differences, it is important to understand where these laws diverge to ensure compliance and limit risks of penalties and damages. Topics covered include consumer rights, covered entities and information, controller responsibilities, processor responsibilities, and enforcement.