72.9 million Americans now do independent or freelance work, according to MBO Partners' 2025 State of Independence in America report, and no study has directly measured what share of their websites carry a privacy notice. The closest available proxy comes from Canada's privacy regulator: only 78% of small businesses with 1 to 19 employees have a privacy policy, compared with 92% of businesses with 100 or more employees, a gap that widens further for a solo operator with no formal compliance function at all.
Below is how large the freelance economy actually is, the clearest available data on the size-based compliance gap, and exactly where GDPR and CCPA do and do not apply to a one-person operation.
How big is the freelance economy?
Independent work now touches a meaningful share of the labor force by any measure available. MBO Partners' 2025 report counted 72.9 million independent workers in the US, roughly 45% of the labor force, including 11.5 million independent professional service providers such as consultants, contractors, and freelance specialists. Upwork's separate Future Workforce Index, based on a survey of 3,000 skilled knowledge workers fielded through early 2025, found 28% of US knowledge workers now freelance, generating an estimated $1.5 trillion in 2024 earnings.
Figure 1: Freelance economy growth alongside the closest available small-business compliance data. Source: MBO Partners, Upwork, Office of the Privacy Commissioner of Canada.
The number of high earners inside that population is growing quickly too: 5.6 million independent workers earned $100,000 or more in 2025, up 19% from 4.7 million the year before, according to the same MBO Partners report. A freelancer earning six figures from a portfolio site or client-facing web presence carries real reputational and legal exposure if that site collects contact-form or analytics data without disclosing it.
What percentage of freelancer websites actually have a privacy policy?
No study has measured freelancer or solo-operator websites as their own category. The best available proxy is Canada's Office of the Privacy Commissioner's 2025-2026 survey of 800 businesses, conducted by phone between January and February 2026 with a disclosed margin of error of plus or minus 3.5%. It found 78% of businesses with 1 to 19 employees have a privacy policy, against 92% of businesses with 100 or more employees, for an overall rate of 84% across all sizes surveyed.
Figure 2: Businesses with a privacy policy, by employee count. Source: Office of the Privacy Commissioner of Canada, 2025-2026 Survey of Canadian Businesses on Privacy-Related Issues.
That same survey found 88% of small businesses report taking at least some steps toward privacy compliance, and 55% called compliance "very easy," which suggests the 22-percentage-point gap between the smallest and largest businesses is not primarily a technical difficulty problem. A solo freelancer, who by definition operates below even the "1 to 19 employees" band this survey measures, would reasonably be expected to sit somewhere below the 78% figure rather than at it. A freelancer who wants to close that gap can generate a privacy policy that names every client-intake form, analytics tool, and payment processor the site uses.
Does GDPR apply to a solo freelancer?
Yes, without exception based on size. GDPR's narrow exemption covers only "purely personal or household activity," which does not extend to a freelancer's business website, portfolio, or client-facing tools. The UK's Information Commissioner's Office publishes a dedicated self-assessment checklist specifically for small business owners and sole traders, a clear signal from a primary regulator that size alone provides no cover.
Figure 3: How GDPR and CCPA scope typically resolves for a solo freelance operation. Source: GDPR Article 2(2)(c), Cal. Civ. Code Section 1798.140.
Does CCPA apply to most freelancers?
Usually not, and this is the one area where freelancers get real relief that larger small businesses do not. CCPA's threshold for 2026 exempts any business under $26,625,000 in annual gross revenue, unless that business also buys, sells, or shares the personal information of 100,000 or more California consumers or households annually, or derives 50% or more of its revenue from selling personal information. A typical solo freelancer clears all three thresholds by a wide margin, which is why CCPA compliance guidance rarely targets independent contractors directly the way GDPR guidance does.
That asymmetry matters for how a freelancer should think about their own privacy notice: a US-only freelancer with no EU clients may have genuinely low legal exposure under either law, while a freelancer who takes on even one EU-based client, or runs analytics that logs EU visitor IP addresses, is fully in GDPR's scope the moment that data is processed.
How many freelancers route their data handling through a platform instead?
63% of independent service providers now use an online talent platform such as Upwork, Fiverr, or Toptal, up from 59% in 2024 and just 37% in 2020, according to MBO Partners.
Figure 4: Share of independent service providers using an online talent platform. Source: MBO Partners, State of Independence in America, 2020 to 2025.
That shift changes where the compliance burden sits for a meaningful share of the freelance economy: a platform like Upwork or Fiverr, which reported 3.1 million annual active buyers as of December 2025, handles payment processing, messaging, and identity verification under its own privacy policy, leaving the freelancer's personal website with a narrower, lower-risk footprint of data it collects directly. A freelancer who works primarily through platforms still needs a privacy policy for their own portfolio site if it runs analytics or a contact form, but the compliance surface is smaller than for a freelancer running an independent client-intake and payment operation from their own domain.
The Bottom Line
The freelance economy has grown past 72 million people in the US alone, and every available proxy suggests the smallest operations, including solo freelancers, lag well behind larger businesses on basic legal-page compliance. GDPR gives freelancers no size-based exemption at all, while CCPA effectively exempts most of them through its revenue and data-volume thresholds. That split means a freelancer's real compliance obligation depends less on how big their business is and more on where their clients and site visitors are. A freelancer with even occasional EU traffic needs a real privacy policy, not a template copied from another site, describing exactly what a contact form, invoice tool, or analytics script collects.
Frequently Asked Questions
How many freelancers are there in the US? 72.9 million Americans did independent or freelance work in 2025, according to MBO Partners' 2025 State of Independence in America report, its 15th annual edition. Separately, Upwork's Future Workforce Index found 28% of US knowledge workers now freelance, generating an estimated $1.5 trillion in 2024 earnings.
What percentage of freelancer websites have a privacy policy? No study has measured freelancer websites specifically. The closest available proxy comes from Canada's Office of the Privacy Commissioner, whose 2025-2026 survey found only 78% of businesses with 1 to 19 employees have a privacy policy, compared with 92% of businesses with 100 or more employees.
Does GDPR apply to a freelancer with no employees? Yes. GDPR has no size or revenue exemption for sole traders. The UK's Information Commissioner's Office publishes a dedicated self-assessment checklist specifically for small business owners and sole traders, and a freelancer processing any EU resident's personal data is in scope regardless of how small the operation is.
Does CCPA apply to most freelancers? Usually not. CCPA exempts businesses below a $26,625,000 annual gross revenue threshold for 2026, unless the business also buys, sells, or shares the personal information of 100,000 or more California consumers or households a year, or derives 50% or more of its revenue from selling personal information. Most solo freelancers fall under all three thresholds.
This post is part of a broader look at how small and independent operators handle privacy compliance. See Blogger Legal Pages 2026 for how personal and monetized blogs compare, and Charity Privacy Compliance 2026 for how mission-driven organizations fare. A companion post on real estate websites is planned for this cluster but not yet published on this site.
Where the Numbers Come From
- MBO Partners. (2025). "2025 State of Independence in America." 15th annual report on the US independent workforce.
- Upwork Research Institute. (2025). "Future Workforce Index." Survey of 3,000 US-based skilled knowledge workers, fielded December 2024 to February 2025.
- Office of the Privacy Commissioner of Canada. (2026). "2025-2026 Survey of Canadian Businesses on Privacy-Related Issues." Telephone survey of 800 companies, fielded January 19 to February 25, 2026.
- UK Information Commissioner's Office. "How well do you comply with data protection law: an assessment for small business owners and sole traders."
- Upwork. (2023). "Freelance Forward 2023." Survey of 3,000 US adults, fielded October to November 2023.
- Fiverr International Ltd.. (2025). Third Quarter 2025 Financial Results. 3.1 million annual active buyers as of December 2025.
Note: All figures verified as of September 2026. No study directly measures privacy policy adoption among freelancer or solo-operator websites; this post uses the Office of the Privacy Commissioner of Canada's small-business survey as the closest available proxy and flags that limitation throughout rather than presenting it as a freelancer-specific figure. This post's figures are refreshed at least twice a year to track new workforce and compliance survey data.
