We heartily welcome every country decision and support them,
- GDPR
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. It does this by replacing the data protection directive (Directive 95/46/EC) of 1995. The GDPR regulates the processing of personal data by both public and private organizations.
The GDPR applies to any organization that collects or processes the personal data of individuals in the EU, regardless of whether the organization is located in the EU. This means that even if you are a US-based company, if you have a website that collects the personal data of EU citizens, you are subject to the GDPR.
The GDPR has a number of requirements for websites, including:
-
Obtaining consent from individuals before collecting their personal data
-
Providing individuals with access to their personal data
-
Deleting personal data upon request
-
Reporting data breaches to data protection authorities
-
US State Law
There are a number of US state laws that regulate the collection and use of personal data. These laws vary from state to state, but they typically include requirements similar to those of the GDPR.
Some of the most important US state laws for websites include:
- California Consumer Privacy Act (CCPA)
- Virginia Consumer Data Protection Act (VCDPA)
- Colorado Privacy Act (CPA)
- Utah Consumer Privacy Act (UCPA)
The CCPA is the most comprehensive state privacy law in the US. It applies to all businesses that collect the personal data of California residents, regardless of whether the business is located in California. The CCPA gives California residents a number of rights, including the right to:
- Know what personal data is being collected about them
- Delete their personal data
- Opt out of the sale of their personal data
The VCDPA is similar to the CCPA, but it applies to a narrower range of businesses. The VCDPA applies to businesses that collect the personal data of Virginia residents and that meet certain revenue thresholds. The VCDPA gives Virginia residents the same rights as California residents under the CCPA.
The CPA and the UCPA are both newer laws that are still being implemented. The CPA applies to businesses that collect the personal data of Colorado residents and that meet certain revenue thresholds. The UCPA applies to businesses that collect the personal data of Utah residents. Both the CPA and the UCPA give Utah and Colorado residents a number of rights, including the right to:
- Know what personal data is being collected about them
- Delete their personal data
- Opt out of the sale of their personal data