Regulation Library
Every finding, traced to the source.
Privisy maps each compliance check to the exact statute or regulation it tests. This library is the reference layer: look up any section, understand what it requires, and see whether Privisy currently audits for it.
Legal notice: This library is provided for informational purposes only. It is not legal advice. Regulation text excerpts are reproduced from official public sources and are accurate to the stated effective date. Consult a licensed attorney for compliance guidance.
Frameworks
California Consumer Privacy Act / California Privacy Rights Act
Comprehensive California privacy law granting consumers rights over their personal information and imposing obligations on businesses that collect, sell, or share personal data.
California Delete Act (Data Broker Registration)
California law requiring data brokers to register annually with CalPrivacy and to process consumer deletion requests submitted through DROP, the state deletion mechanism.
Vermont Data Privacy and Online Surveillance Act
Comprehensive Vermont privacy law granting consumer data rights with heightened health-data protections.
Virginia Consumer Data Protection Act
Virginia consumer privacy law granting access, deletion, correction, and opt-out rights for targeted advertising, sale, and profiling, with controller/processor obligations modeled on the GDPR.
Colorado Privacy Act
Comprehensive Colorado privacy law granting consumer rights, requiring data protection assessments, and mandating universal opt-out mechanisms.
Connecticut Data Privacy Act
Connecticut privacy law granting consumer rights, requiring data protection assessments, and honoring opt-out signals, as amended by Public Act No. 25-113 (operative July 1, 2026) and by Public Acts No. 26-64 and No. 26-100 (operative October 1, 2026).
Texas Data Privacy and Security Act
Texas privacy law applying to businesses conducting business in Texas, granting consumer data rights, and requiring recognition of universal opt-out signals.
California Invasion of Privacy Act
California wiretapping and eavesdropping statute. Section 631 reaches anyone who reads or learns the contents of a communication in transit without the consent of all parties, a prior-consent standard rather than the opt-out standard the CCPA applies.