Last review date: 31 December 2024

☒   applies to organizations located in the jurisdiction

☒   applies to organizations located outside of the jurisdiction offering goods or services to data subjects in the jurisdiction

☒   applies to organizations located outside of the jurisdiction engaged in the monitoring of the behavior of data subjects located in the jurisdiction

☒   other

US laws define their territorial scope differently, with some establishing broad application and others having a more narrow application. Nevertheless, many US privacy laws, particularly the CCPA, VCDPA, CPA, CTDPA, and UCPA and state breach notification laws, are tied to the residency of impacted individuals. Notably, Nevada and Washington's recent consumer health privacy laws broadly protect natural persons whose consumer health data is collected in those states.