[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-179838-105":59,"doc-detail-179838-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","2023-us-state-privacy-law-guide","2023 US State Privacy Law Guide","","2023 US State Privacy Law Guide summarizes key state consumer privacy statutes across California, Virginia, Colorado, Connecticut, and Utah. It explains the overview of each act, including approval or enactment timing and effective dates, then details which entities are covered through business presence and revenue or data-volume thresholds. The guide also compares protected information definitions, highlighting how each law treats personal data and provides enhanced protections for sensitive data categories.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/2023-us-state-privacy-law-guide/179838/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/2023-us-state-privacy-law-guide/179838.png","ImageObject",300,407,{"name":92,"@type":93},"Levi","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-30","2026-09-02",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",12,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"When do the major state privacy laws take effect in 2023?","Question",{"text":113,"@type":114},"The guide lists CPRA taking effect on January 1, 2023, VCDPA on January 1, 2023, and CPA on July 1, 2023, with CTDPA also on July 1, 2023. UCPA is shown as effective December 31, 2023.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"What types of entities are covered under these laws?",{"text":118,"@type":114},"Each statute applies to entities that do business in the state or target residents, and also meet specific threshold conditions. Thresholds commonly rely on annual revenue and/or the size of personal data processing for consumers, households, or devices.",{"name":120,"@type":111,"acceptedAnswer":121},"How do these laws define protected personal information and sensitive data?",{"text":122,"@type":114},"The guide shows that CPRA uses the CCPA definition while adding sensitive personal information, and each other state law defines personal data as information linked or linkable to an identifiable person. Enhanced protections are described for sensitive categories such as precise geolocation, genetic or biometric information, and related health or identity attributes.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},179838,1788338425,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":19,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":130,"read_time":52,"preview_page_count":4},7971461740909,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","|  | California Privacy Rights Act of 2020 (CPRA) | Virginia Consumer Data Protection Act (VCDPA) | Colorado Privacy Act (CPA) | Connecticut Data Privacy Act (CTDPA) | Utah Consumer Privacy Act (UCPA) |\n| --- | --- | --- | --- | --- | --- |\n| Overview | The CPRA, approved by voters in 2020, amends the CCPA and imposes significant new privacy compliance obligations on businesses. It will take effect onJanuary 1, 2023. | In 2021, Virginia enacted the VCDPA, a comprehensive consumer data privacy law that will take effect onJanuary 1, 2023. | Also in 2021, Colorado enacted the CPA, a comprehensive privacy law that will take effect onJuly 1, 2023. | In May 2022, Connecticut enacted the Personal Data Privacy and Online Monitoring Act (CTDPA). This new law will go into effect onJuly 1, 2023. | In March 2022, Utah enacted the UCPA, a comprehensive consumer data privacy law that will take effect on December 31, 2023. |\n| What Entities Are Covered? | The CPRA applies to for-profit entities that (1) collect and control the processing of a California resident’s personal information; (2) do business in California; and (3) meet at least one of the following threshold requirements:\u003Cbr>• Have annual gross revenues in excess of $25 million;\u003Cbr>• Receive or disclose the personal information of 100,000 or more consumers, households, or devices per year (double that of the CCPA); or\u003Cbr>• Derive 50% or more of their annual revenues from selling or sharing the personal information of California residents. | The VCDPA applies to entities (including for-profit entities and certain nonprofit entities) or individuals that (1) conduct business in Virginia or target their products or services to Virginia residents; and (2) meet one or both of the following thresholds:\u003Cbr>• Control or process personal data of at least 100,000 consumers over the course of a calendar year; or\u003Cbr>• Control or process personal data of at least 25,000 consumers and derive over 50% of gross revenue from the sale of personal data. | The CPA applies to entities (including nonprofit entities) that (1) either do business in Colorado or produce or deliver commercial products that are targeted to Colorado residents; and (2) meet one or both of the following thresholds:\u003Cbr>• Control or process the personal data of 100,000 or more consumers over a calendar year; or\u003Cbr>• Derive revenue or receive a discount on the price of goods or services from the sale of personal data and process or control the personal data of 25,000 or more consumers. | The CTDPA applies to entities (including for-profit entities and certain nonprofit entities) that (1) either do business in Connecticut or produce products or services that are targeted to Connecticut residents; and (2) meet one or both of the following thresholds:\u003Cbr>• Control or process the personal data of 100,000 or more consumers during a calendar year (excluding personal data controlled or processed solely for the purpose of completing a payment transaction); or\u003Cbr>• Control or process the personal data of 25,000 or more consumers and derive more than 25% of their gross revenue from the sale of personal data during a calendar year. | The UCPA applies to a for-profit“controller” or “processor” entity that (1) conducts business in Utah or produces a product or services that targets Utah residents; (2) has an annual revenue of $25 million or more; and (3) meets at least one of the following thresholds:\u003Cbr>• Controls or processes the personal data of 100,000 or more consumers; or\u003Cbr>• Derives over 50% of the entity’s gross revenue from the sale of personal data and controls or processes personal data of 25,000 or more consumers. |\n\n|  | CPRA | VCDPA | CPA | CTDPA | UCPA |\n| --- | --- | --- | --- | --- | --- |\n| What Information Is Protected? | The CPRA uses the same definition of personal information as the CCPA, but adds a new subcategory: sensitive personal information. Sensitive personal information is defined to include:\u003Cbr>• Social Security, ","cbCaib5WU0zKHyo8","https://ap.wps.com/l/cbCaib5WU0zKHyo8","pdf",120042,"English","# Overview\n## California Privacy Rights Act of 2020 (CPRA)\n## Virginia Consumer Data Protection Act (VCDPA)\n## Colorado Privacy Act (CPA)\n## Connecticut Data Privacy Act (CTDPA)\n## Utah Consumer Privacy Act (UCPA)\n# What Entities Are Covered?\n# What Information Is Protected?","[{\"question\":\"When do the major state privacy laws take effect in 2023?\",\"answer\":\"The guide lists CPRA taking effect on January 1, 2023, VCDPA on January 1, 2023, and CPA on July 1, 2023, with CTDPA also on July 1, 2023. UCPA is shown as effective December 31, 2023.\"},{\"question\":\"What types of entities are covered under these laws?\",\"answer\":\"Each statute applies to entities that do business in the state or target residents, and also meet specific threshold conditions. Thresholds commonly rely on annual revenue and/or the size of personal data processing for consumers, households, or devices.\"},{\"question\":\"How do these laws define protected personal information and sensitive data?\",\"answer\":\"The guide shows that CPRA uses the CCPA definition while adding sensitive personal information, and each other state law defines personal data as information linked or linkable to an identifiable person. Enhanced protections are described for sensitive categories such as precise geolocation, genetic or biometric information, and related health or identity attributes.\"}]","2023 US State Privacy Law Guide | PDF"]