Privacy
Stay informed about online privacy best practices, data protection strategies, and how to build trust with your website visitors. Explore topics like data minimisation, user rights management, transparent data collection practices, and the evolving landscape of digital privacy across Europe, the US, and beyond.
Minnesota Consumer Data Privacy Act: What Website Owners Need to Know
The Minnesota Consumer Data Privacy Act (MCDPA) introduces broad consumer rights, strong profiling protections, and a requirement to honour universal opt-out signals. Website owners who serve Minnesota residents should understand the law's thresholds, obligations, and enforcement timeline.
Maryland Online Data Privacy Act (MODPA): One of the Strictest US State Privacy Laws
The Maryland Online Data Privacy Act took effect on 1 October 2025, with enforcement beginning 1 April 2026. MODPA stands apart from other US state privacy laws by prohibiting the sale of sensitive data entirely and imposing a strict data minimisation standard that limits collection to what is reasonably necessary for the service a consumer requests.
Iowa Consumer Data Protection Act (ICDPA): A Compliance Guide for Website Owners
Iowa's consumer data protection law became enforceable on 1 January 2025, but its narrower scope and opt-out-only approach set it apart from other US state privacy laws. This guide covers who must comply, what rights Iowa consumers have, and what your website needs to do.
Delaware Personal Data Privacy Act (DPDPA): What Website Owners Need to Know
Delaware's Personal Data Privacy Act applies to any business processing the data of 35,000 or more residents, with no revenue threshold. The law grants broad consumer rights and requires recognition of universal opt-out signals from January 2026.
Arkansas Personal Data Protection Act (APDPA): What Changes in July 2026
Arkansas enacted the Personal Data Protection Act in 2023, with full enforcement ramping up through 2026. The law grants consumers opt-out rights for targeted advertising and data sales, while requiring opt-in consent for sensitive data processing.
What Is Global Privacy Control? How Browser Opt-Out Signals Work
Global Privacy Control is a browser-level signal that tells websites not to sell or share your personal data. Twelve US states now require businesses to honour it, and California will mandate GPC support in all browsers by 2027.
Vietnam's Data Protection Decree: What Global Websites Should Know
Vietnam's Decree 13/2023/ND-CP brought the country its first comprehensive personal data protection rules, effective since July 2023. With a full Personal Data Protection Law replacing the Decree from January 2026, global websites targeting Vietnamese users face strict consent, data localisation, and cross-border transfer obligations.
Virginia Consumer Data Protection Act (VCDPA): What Website Owners Need to Know
The Virginia Consumer Data Protection Act uses an opt-out model rather than requiring upfront cookie consent. Website owners who process data from Virginia residents need to understand the thresholds, consumer rights, and enforcement mechanisms that set the VCDPA apart from other US state privacy laws.
US State Privacy Laws Compared: A Side-by-Side Guide to All 20+ Frameworks
Twenty US states now have comprehensive consumer privacy laws on the books, each with different applicability thresholds, consent models, and enforcement mechanisms. This guide puts them side by side so you can see exactly where your obligations lie.