Website Privacy Policy regulations are constantly changing, plus the rules can vary between states. For example, The California Consumer Privacy Act (CCPA) applies to businesses that have annual gross revenue of over $25 million regardless of where the revenue is derived from. In contrast, the Colorado Privacy Act (CPA) only applies to businesses in Colorado where the products or services are intentionally targeted to residents of Colorado. The implication is that you might need to comply with both privacy policies as a Colorado business.
At the end of 2021, there were three states that had enacted consumer privacy laws (California, Colorado, and Virginia). However, there are 11 other states with pending consumer privacy legislation, meaning that over 25% of the United States could have website privacy regulations in 2022. If you are interested in knowing more, please review the Termageddon State Privacy Bill Tracker for more details.
