The laws, and what they mean in practice
Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.
California
State laws below. Federal laws such as HIPAA, COPPA and the FTC Act apply in every state: see US federal.
US states 3
CCPA/CPRA
CaliforniaThe most detailed US state privacy law and the only one with a dedicated privacy regulator. It covers employee and business-to-business data, requires opt-outs from selling and sharing, and has its own regulations on automated decision-making.
Delete Act
CaliforniaLets a California resident ask every registered data broker to delete their data with one request, which brokers must check and process on a fixed schedule.
CA AADC
CaliforniaWould require child-protective defaults and assessments for services likely to be used by children. Its enforceability is being decided in court.
This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.