Comprehensive State Consumer Data Protection Acts: Part 1 – Do I Need To Comply?

Every company doing business in California, Colorado, and Virginia needs to determine whether the states' new privacy laws impact their businesses and if so, what steps they need to take to comply with these new laws. In this part one of our series on the comprehensive state consumer data protection acts, we walk you through the thresholds for determining the applicability of the new laws.

There are specific thresholds for determining whether each state's law applies to your company. In Virginia and Colorado, business and commercial information is expressly excluded. Consumers are defined as individuals acting only in an individual or household context. In California, business information is presently exempt, but the exemption expires January 1, 2023. Generally, each state's law will apply to any entity that: