Choose a regulation
CCPA / CPRA
Verify that GPC and GPP signals are honored, that Do Not Sell or Share actually stops sharing, and that dark patterns are not in play.
CIPA and ECPA
Detect session replay, chat, and keystroke capture that create wiretap exposure under California and federal law.
GDPR, UK GDPR, and ePrivacy
Test consent enforcement, cookies, fingerprinting, and ID syncing across EU and UK properties.
HIPAA and MHMD
Detect health data leaking through pixels, SDKs, and third parties on patient-facing web and mobile properties.
Quebec Law 25
Verify bilingual consent, cross-border data flows, and region-specific tracking under Quebec’s privacy law.
VPPA
Detect pixels that share video-viewing data with third parties and check consent before identifiers are disclosed.
Browse every privacy law we track
All 45 laws are on one page: privacy laws by state and country. Each has a plain-English summary: who it applies to, what it requires, who enforces it and the penalties, with the articles we have published on it.
- US state privacy laws: every comprehensive state law in effect or signed, from California to Vermont.
- Federal and sector laws: CIPA, VPPA, HIPAA, GLBA, COPPA, BIPA, the Wiretap Act and more.
- International privacy laws: GDPR, the ePrivacy Directive, UK GDPR, LGPD, Quebec Law 25 and more.
Prefer a map? See the US state privacy laws map or the global privacy laws map.