Page 2 - GDPR and US States General Privacy Laws Deskbook

2 | General Privacy Laws Deskbook: US State Laws and GDPR
California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020)
and Related Regulations................................................................................................................................................................................17
California Consumer Privacy Act Regulations. .........................................................................................................................................58
Colorado Privacy Act .................................................................................................................................................................................. 103
Colorado Privacy Act Rules . ...................................................................................................................................................................... 119
Connecticut Consumer Data Privacy and Online Monitoring . ......................................................................................................... 159
Delaware Personal Data Privacy Act. ...................................................................................................................................................... 175
Indiana Code Concerning Trade Regulation. .......................................................................................................................................... 191
Iowa Relating To Consumer Data Protection, Providing Civil Penalties, and Including Effective Date Provisions ............ 207
Kentucky Consumer Data Protection Act.............................................................................................................................................. 218
Florida Technology Transparency ............................................................................................................................................................ 232
Montana Consumer Data Privacy Act .................................................................................................................................................... 251
Nebraska Data Privacy Act........................................................................................................................................................................ 267
New Hampshire Expectation of Privacy. ................................................................................................................................................ 286
New Jersey Privacy Act. .............................................................................................................................................................................. 299
Oregon Privacy Act...................................................................................................................................................................................... 314
Tennessee Information Protection Act .................................................................................................................................................. 336
Texas Data Privacy and Security Act....................................................................................................................................................... 353
Utah Consumer Privacy Act ...................................................................................................................................................................... 370
Virginia Consumer Data Protection Act ................................................................................................................................................ 387
EU General Data Protection Regulation. ................................................................................................................................................ 399
Recitals (EU General Data Protection Regulation). .............................................................................................................................. 459
California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020)
and Related Regulations................................................................................................................................................................................17
1798.100 General Duties of Businesses that Collect Personal Information ........................................................................................................18
1798.105 Consumers’ Right to Delete Personal Information. ..................................................................................................................................19
1798.106 Consumers’ Right to Correct Inaccurate Personal Information. ............................................................................................................20
1798.110 Consumers’ Right to Know What Personal Information is Being Collected. Right to Access Personal Information. ................20
1798.115 Consumers’ Right to Know What Personal Information is Sold or Shared and to Whom. ..............................................................21
1798.120 Consumers’ Right to Opt Out of Sale or Sharing of Personal Information.........................................................................................22
1798.121 Consumers’ Right to Limit Use and Disclosure of Sensitive Personal Information. ..........................................................................22
1798.125 Consumers’ Right of No Retaliation Following Opt Out or Exercise of Other Rights......................................................................23
1798.130 Notice, Disclosure, Correction, and Deletion Requirements.................................................................................................................23
1798.135 Methods of Limiting Sale, Sharing, and Use of Personal Information and Use of Sensitive Personal Information...................26
CONTENTS