Generate your Privacy Policy for free, Get started now →
CPRA doubled the CCPA's data-volume compliance threshold from 50,000 to 100,000 California consumers or households, effective January 1, 2023, one of at least six substantive changes the amendment made to the original 2018 law. See every CCPA-to-CPRA difference: new rights, enforcement body, cure period, and statutory damages, with the 2026 compliance data behind each one.
Read article
Eight comprehensive state privacy laws took effect in 2025 alone, more than any other year on record, per PrivacyTerms.io's compilation of the IAPP US State Privacy Legislation Tracker and MultiState's 2026 roundup. See the full 2020-2026 effective-date timeline and which states are still pending.
Read article
A small business with fewer than 20 employees faced roughly $50,000 in initial CCPA compliance costs, per Berkeley Economic Advising and Research's 2019 economic impact assessment for the California Attorney General. New 2025 cybersecurity-audit and ADMT rules now add up to $363,000 more for larger covered businesses.
Read article
General Motors' $12.75 million CCPA settlement, announced in May 2026 by the California Attorney General and the California Privacy Protection Agency, is the largest of 13 confirmed cases. See every CCPA settlement ranked from GM's record fine down to Todd Snyder's $345,178 case, and how the top spot has changed hands three times since 2022.
Read article
The average CCPA settlement is $1.91 million across all 13 confirmed cases publicly disclosed by California regulators since 2022, per PrivacyTerms.io's compilation of California Attorney General and California Privacy Protection Agency enforcement actions through May 2026. See why the median case pays far less.
Read article
California regulators have brought 13 confirmed CCPA enforcement settlements since Sephora's first case in August 2022, per PrivacyTerms.io's chronological review of California Attorney General and California Privacy Protection Agency press releases through May 2026. See every case, its amount, and its violation, listed in order.
Read article
Twenty states now have a comprehensive privacy law, and each one runs a different applicability test. Here's the actual decision framework for figuring out which ones cover your business.
Read article
GDPR fines have reached roughly EUR 7.1 billion since 2018, about 285 times CCPA's $24.9 million since 2022, per DLA Piper's January 2026 survey and PrivacyTerms.io's CCPA settlement tracking. See the full scope, consent, and penalty differences in one 2026 table.
Read article
Only 1 of the 20 comprehensive US state privacy laws, California's CCPA, gives consumers any right to sue directly, and even that is limited to data breaches. See how every state's private right of action and cure period compares as of 2026.
Read article
69% of audited websites still fired three or more trackers after a visitor clicked Do Not Sell, per DataGrail's 2025 Data Privacy Trends Report. See click-through rates, denial rates, and enforcement fines behind the link's real-world usage in 2026.
Read article
A CCPA notice at collection and a full privacy policy are not the same document. Here's what each one has to say, where it has to appear, and when you need both.
Read article
GDPR and CCPA use completely different tests for who has to comply. Here's how each law actually decides if your business is covered, with the real threshold numbers.
Read article
More than 300,000 Californians signed up for the state's Delete Request and Opt-Out Platform in its first five months, according to the California Privacy Protection Agency's June 2026 update, the most complete state-published consumer rights request count anywhere in the country. See how it compares to complaint growth, data broker registrations, and what other states do and do not publish.
Read article
The CCPA opt-out link isn't required on every website. Here's exactly what triggers the requirement, what changed under the CPRA, and where the link has to go.
Read article
A privacy policy and a cookie policy cover different things and answer to different laws. Here's how to tell whether your site needs one document or two.
Read article
An estimated 171 million Americans, or 50.2% of the country, live in one of the 20 states with a comprehensive privacy law in effect as of 2026, per PrivacyTerms.io's analysis of US Census Bureau population data against the IAPP's US State Privacy Legislation Tracker.
Read article![45% of Websites Honor Global Privacy Control [2026]](/_astro/how-many-companies-honour-global-privacy-control._tc80agZ_Z2gW2bw.webp)
Only 45% of websites that sell or share personal data honored Global Privacy Control opt-out signals when tested in April 2024, per a Wesleyan University and Princeton University study published at USENIX Security 2025. See the full compliance trend and enforcement data.
Read article
52,326 California businesses are subject to the CCPA, according to the California Privacy Protection Agency's 2024 Standardized Regulatory Impact Assessment. See the applicability thresholds, the small-business breakdown, and how many face added cybersecurity-audit and ADMT rules.
Read article
Do Not Sell opt-out requests under the CCPA rose 37% in 2024 over 2023, per DataGrail's 2025 Data Privacy Trends Report, even as 69% of audited businesses still fail to honor them. See the full request-type breakdown and California's new opt-out platform.
Read article![20 of 50 US States Have Privacy Laws in 2026 [Tracker]](/_astro/how-many-us-states-have-privacy-laws-in-2026.CaXY8Bln_zSIkn.webp)
20 of the 50 US states, 40 percent, have a comprehensive consumer privacy law in effect as of 2026, per the IAPP's US State Privacy Legislation Tracker. Four more are enacted but not yet effective, and 26 states still have no comprehensive privacy law at all.
Read article
On July 21, 2026, the California Privacy Protection Agency (CalPrivacy) announced its Audits Division had opened its first formal CCPA sectoral audit, targeting how gig economy platforms handle consumer and worker access requests.
Read article
The CPPA's Data Broker Enforcement Strike Force issued its first fine against a marketing firm for selling custom audiences without registering as a data broker. Here is what triggers the registration duty.
Read article
California's data broker deletion platform, DROP, goes live today. Registered brokers must process consumer deletion requests or face $200 per request, per day, in penalties.
Read article
GDPR requires opt-in consent before cookies load. CCPA/CPRA requires an opt-out link instead. Here's what each law actually demands, side by side.
Read article
California regulators have collected roughly 24.9 million dollars across 13 confirmed CCPA settlements since 2022, led by a record 12.75 million dollar General Motors penalty in May 2026. See the year-by-year trend, the biggest fines, and the violations that trigger enforcement most often.
Read article
Twenty US states now have a comprehensive consumer privacy law in effect as of January 2026, per the IAPP's US State Privacy Legislation Tracker, with four more enacted and awaiting effective dates. See the full state-by-state list, effective dates, and what each law requires.
Read article
A quick rundown of the international privacy laws: GDPR, CCPA, CalOPPA, COPPA, PIPEDA, and the Australian Privacy Act, driving privacy policy updates worldwide.
Read article
The key similarities and differences between California's two major privacy laws: who they apply to, and what each requires of your privacy policy.
Read article
An overview of the major online privacy laws, GDPR, CalOPPA, and CCPA, and what they require from your website or business.
Read article