Simplify US privacy law compliance

The current US privacy landscape is complex. Some states have fully enacted comprehensive data privacy laws while others vary in legislation maturity.

We’re here to simplify your compliance journey and support you in protecting personal data while building trust with your customers.

Request demo

Download resource kit

How OneTrust supports consumer rights and compliance

Explore consumer rights and business requirements across enacted US privacy laws and see how our Privacy and Data Governance Cloud can help.

Right to access, correction, deletion and portability

Fulfilling consumer requests all starts with having an appropriate intake method for consumers to make requests to access, correct, delete, or transmit their data. Explore the chart below to see which enacted US privacy laws require these rights.


	Right to access	Right to correct	Right to delete	Right to portability
California: CPRA	X	X	X	X
Colorado	X	X	X	X
Connecticut	X	X	X	X
Delaware	X	X	X	X
Florida	X	X	X	X
Indiana	X	X	X	X
Iowa	X		X	X
Montana	X	X	X	X
Oregon	X	X	X	X
Tennessee	X	X	X	X
Texas	X	X	X	X
Utah	X		X	X
Virginia	X	X	X	X

Note: Cells with an 'X' indicate the corresponding law requires that particular right.

Processing personal rights requests can be time consuming for the business. OneTrust Privacy Rights Automation expedites the entire DSAR fulfillment process by:

Streamlining intake across your different touchpoints
Simplifying identity verification and data discovery
Automating the redaction and response process

Right to opt-out and limit use

Organizations that utilize the advertising ecosystem will have to pay particular attention to opt-out requests. Explore the chart below to see which enacted US privacy laws specify opt-out, right to use, and disclosure requirements.


	Right to opt-out			Right to limit use and disclosure
	Sale	Profiling	Targeted advertising	Sensitive personal information
California: CPRA	X	X	X	X
Colorado	X	X	X	Opt-in required
Connecticut	X	X	X	Opt-in required
Delaware	X	X	X	Opt-in required
Florida	X	X	X	Opt-in required
Indiana	X	X	X	Opt-in required
Iowa	X		X	X
Montana	X	X	X	Opt-in required
Oregon	X	X	X	Opt-in required
Tennessee	X	X	X
Texas	X	X	X	Opt-in required
Utah	X		X
Virginia	X	X	X	Opt-in required

Note: Cells with an 'X' indicate the corresponding law requires that particular right.

Our Consent and Preferences solution operationalizes opt-outs by:

Automatically identifying third-party trackers
Delivering a consumer-first preference center where preferences can be changed at any time and applied across all touchpoints
Enforcing opt-outs and processing limitations based on preferences and opt-out requirements

Right to notice and transparency

All enacted US privacy laws require notice and transparency be provided to those covered under the law. OneTrust Digital Policy Management helps by enabling you to centrally manage policies across digital assets.

Schedule automatic website and mobile app scans to trigger policy updates
Use pre-built templates and sync the latest updates across your web and app properties

Risk assessments

All enacted US privacy laws (aside from Iowa and Utah) require formal risk assessments of privacy and/or security projects or procedures. OneTrust PIA & DPIA Automation integrates with your existing business processes, giving you real-time comprehensive risk discovery and actionable insights for risk mitigation. In addition to streamlining the assessment process, our Privacy Management solution also equips you with the tools to improve your privacy program. Privacy awareness training, third-party risk management, and privacy and security incident management are available to unify and optimize your data privacy program activities.

Webinar

Simplify US privacy law compliance

How OneTrust supports consumer rights and compliance

Right to access, correction, deletion and portability

Right to opt-out and limit use

Right to notice and transparency

Risk assessments

You might also like

Privacy Management

Automating fulfillment of subject rights requests in the US

Learn how Privacy Rights Automation helps to fully automate privacy rights requests.

December 06, 2023

Privacy Management

December's deadline: Ensuring compliance with Utah's privacy regulation

Join us for a webinar as we explore the impending implementation of the Utah Privacy Law, set to take effect on December 31, 2023.

November 14, 2023

Privacy Management

The road to privacy compliance: A spotlight on Oregon & Delaware legislation

We explore the new Oregon and Delaware privacy laws, how they differ from other US privacy laws, and what they mean for your business.

September 14, 2023

Privacy Management

Utah Consumer Privacy Act law book

Download the Utah Consumer Privacy Act law book and have the official UCPA text at your fingertips for when the law takes effect on December 31, 2023.

September 04, 2023

Privacy Management

The road to 50 states: Delaware and Oregon join the US privacy landscape

Get in-depth analysis on two upcoming US Privacy laws, the Oregon Consumer Privacy Act (OCPA) and the Delaware Personal Data Privacy Act (DPDPA), with OneTrust DataGuidence and a panel of experts.

August 10, 2023

Privacy Management

EU-US Data Privacy Framework resource kit

Download our EU-US Data Privacy Framework resource kit to better understand the new aggreement for cross-border personal data transfers and how to educate your stakeholders.

July 20, 2023

Privacy & Data Governance

US privacy resource kit

Download our US privacy resource kit designed to access a range of materials to help you understand how the US privacy landscape is evolving.

July 13, 2023

Privacy Management

Now in effect: Colorado and Connecticut privacy laws

In this free webinar, our privacy experts delve into the new Colorado and Connecticut privacy laws and how they differ from other US state regulations.

July 12, 2023

Privacy Management

New states, new dates: Preparing for Indiana, Montana, Tennessee and Florida state privacy laws

Join our expert panel where we examine upcoming privacy legislation in Indiana, Montana, Tennessee, and Florida and the key requirements of each law.

June 20, 2023

Consent & Preferences

Navigating Google's new CMP requirements

Adapt to Google's June 2023 CMP requirements with this infographic and confidently engage your audience while staying compliant.

June 20, 2023

Privacy Automation

US privacy laws on the horizon: Which states will be next?

Join our live webinar as OneTrust DataGuidence and privacy experts examine new privacy legislation in Indiana, Montana, Tennessee, Florida, and Texas.

June 15, 2023

Consent & Preferences

The ultimate guide to consent and preferences for marketers

Download this eBook and learn how marketers can apply consent and preference principles to build a relationship with their audience built on trust.

June 02, 2023

Privacy Management

Colorado Privacy Act law book

The Colorado Privacy Act (CPA) comes into force on July 1. Get the law's official text right at your fingertips.

May 30, 2023

Privacy Management

Understanding Washington's My Health My Data Act

The Washington My Health My Data Act was signed into law on April 27, 2023 and will be enacted the following year. Join OneTrust DataGuidance and a team of legal experts and get the knowledge you need for compliance.

May 18, 2023

Privacy & Data Governance

Operationalizing the Iowa Consumer Data Protection Act

Join the Privacy experts at OneTrust for an update on the new law and learn key requirements of Iowa’s new privacy law and more.

May 16, 2023

AI Governance

Navigating responsible AI: A privacy professional's guide

Download our white paper and learn how privacy teams help organizations establish and implement polices that ensure AI applications are responsible and ethical.

May 03, 2023

Privacy & Data Governance

Comparing US privacy law exemptions infographic

Learn how to navigate the new US privacy law exemptions and see how they compare.

May 01, 2023

Privacy & Data Governance

Automate subject rights requests for compliance with US state privacy laws

Join this interactive webinar to learn how OneTrust Privacy Rights Automation helps you to fully automate privacy rights requests for your organization.

April 19, 2023

Privacy & Data Governance