Privacy Cheat Sheet - PrivacyPillar

Guides.Frameworks.Solutions.

Privacy Cheat Sheet

Privacy Laws, Untangled.

Your quick-reference guide to DPDPA, GDPR and CCPA compliance.Privacy regulations are evolving fast – and businesses can’t afford to fall behind. Whether you operate in India, Europe or the U.S., staying compliant means understanding how different laws overlap, where they diverge, and what that means for your operations.

The Privacy Cheat Sheet gives you a clear, side-by-side comparison of the Digital Personal Data Protection Act (DPDPA), GDPR and CCPA, so you can cut through complexity and focus on what matters: building trust and reducing risk.

What’s Inside the Cheat Sheet

A side-by-side comparison of DPDPA, GDPR, and CCPA
Key obligations and compliance requirements at a glance
Data rights every business must uphold
Consent rules and children’s data protection explained
Breach notification timelines and penalties
Practical insights for businesses scaling across borders

Get instant access to clear, actionable privacy insights.
Download your copy by filling out the form.

Download the Guide

First Name*

Last Name*

Work Email*

Privacy Pillar is committed to protecting and respecting your privacy. We will only use your personal information to communicate in response to enquiries, provide requested materials or to share information about Privacy Pillar's products and services that we believe may be of interest.

I agree to allow Privacy Pillar to communicate with me in accordance with Privacy Pillar’s Privacy Policy.

You can manage your privacy choices or opt-out at any time. For additional information on how to unsubscribe, our privacy practices, and how we are committed to protecting and respecting your privacy, please review the Privacy Policy.

New Jersey Data Privacy Act (NJDPA)

New Jersey Data Privacy Act (NJDPA)

Effective Date: January 15, 2025

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $10,000 for 1st violation and up to $20,000 for subsequent violations

Florida Data Privacy and Security Act (FDBR)

Florida Digital Bill of Rights (FDBR)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
gross annual revenue of at least $1 billion or 50% or more revenue from targeted advertising	Access, Delete, Correct, Opt-Out, Portability	Up to $50,000 per violation

Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)

Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
35,000 consumers or 10,000+ consumers with 20%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	$10,000 per violation and between $100 – $500 for each intentional disclosure of personal data

Indiana Data Privacy Laws

Indiana Consumer Data Protection Act (INCDPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Tennessee Information Protection Act (TIPA)

Tennessee Information Protection Act (TIPA)

Effective Date: July 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Kentucky Data Privacy Laws

Kentucky Consumer Data Protection Act (KCDPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Minnesota Data Privacy Laws

Minnesota Consumer Data Privacy Act (MCDPA)

Effective Date: July 31, 2025

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Connecticut Data Privacy Act (CTDPA)

Connecticut Data Privacy Act (CTDPA)

Effective Date: July 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $500,000 per violation

Maryland Online Data Privacy Act (MODPA)

Maryland Online Data Privacy Act (MODPA)

Effective Date: Oct 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumers or 10,000+ consumers with 20%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation, and up to $25,000 for repeated violations

Delaware Personal Data Privacy Act (DPDPA)

Delaware Personal Data Privacy Act (DPDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation

New Hampshire Privacy Act

New Hampshire Privacy Act

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation

Virginia Consumer Data Privacy Act (VCDPA)

Virginia Consumer Data Privacy Act (VCDPA)

Effective Date: January 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Texas Data Privacy and Security Act (TDPSA)

Texas Data Privacy and Security Act (TDPSA)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Oregon Consumer Privacy Act (OCPA)

Oregon Consumer Privacy Act (OCPA)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Montana Consumer Data Privacy Act (MTCDPA)

Montana Consumer Data Privacy Act (MTCDPA)

Effective Date: October 1, 2024

Applicability	Consumer Rights	Penalties
50,000 consumer or 25,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Not specified

Iowa Consumer Data Protection Act (ICDPA)

Iowa Consumer Data Protection Act (ICDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Portability Opt-Out	Up to $7,500 per violation

Nebraska Data Privacy Act (NDPA)

Nebraska Data Privacy Act (NDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
Annual gross Revenue exceeding $10 million or buying/selling/sharing personal information of 50,000 or more consumers or 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Colorado Privacy Act (CPA)

Colorado Privacy Act (CPA)

Effective Date: July 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $20,000 per violation with a total maximum penalty of $500,000

Utah Consumer Privacy Act (UCPA)

Utah Consumer Privacy Act (UCPA)

Effective Date: December 31, 2023

Applicability	Consumer Rights	Penalties
$25M revenue and 100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Opt-Out, Portability	Up to $7,500 per violation

California Consumer Privacy Act (CCPA)

California Consumer Privacy Act (CCPA)/CPRA

Effective Date : January 1, 2020/2023

Applicability	Consumer Rights	Penalties
$25M revenue, 50,000 consumers, or 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	$2,500 per violation; $7,500 for intentional violations