{
  "about": "The twelve states whose statutes require honouring an opt-out preference signal. Each url is the state's own legislature, attorney-general or privacy-agency page; status, retrieval date and the quoted text are in sources.json. A reading aid, not legal advice.",
  "retrieved": "2026-10-10",
  "statutes": [
    {
      "state": "CA",
      "name": "California",
      "act": "California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (Prop 24)",
      "citation": "Cal. Civ. Code 1798.135(b)(1) and (e); duty made operative by 11 CCR 7025(b)",
      "effective": "2023-01-01",
      "displayRequired": true,
      "covers": "The sale and the sharing of personal information (sharing means cross-context behavioural advertising).",
      "url": "https://cppa.ca.gov/pdf/20260101_ccpa_statute.pdf"
    },
    {
      "state": "CO",
      "name": "Colorado",
      "act": "Colorado Privacy Act (SB21-190)",
      "citation": "C.R.S. 6-1-1306(1)(a)(IV)(B)",
      "effective": "2024-07-01",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://content.leg.colorado.gov/sites/default/files/2021a_190_signed.pdf"
    },
    {
      "state": "CT",
      "name": "Connecticut",
      "act": "Connecticut Data Privacy Act (CTDPA), Conn. Gen. Stat. 42-515 et seq.",
      "citation": "Conn. Gen. Stat. 42-520(e)(1)(A)(ii)",
      "effective": "2025-01-01",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://portal.ct.gov/ag/sections/privacy/the-connecticut-data-privacy-act"
    },
    {
      "state": "DE",
      "name": "Delaware",
      "act": "Delaware Personal Data Privacy Act (DPDPA), 6 Del. C. ch. 12D",
      "citation": "6 Del. C. 12D-106(e)(1)a.2. (version effective until Jan. 1, 2027; same text in the version effective Jan. 1, 2027)",
      "effective": "2026-01-01",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://delcode.delaware.gov/title6/c012d/index.html"
    },
    {
      "state": "MT",
      "name": "Montana",
      "act": "Montana Consumer Data Privacy Act (MCDPA)",
      "citation": "MCA 30-14-2809(3)(b)",
      "effective": "2025-01-01",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://mca.legmt.gov/bills/mca/title_0300/chapter_0140/part_0280/section_0090/0300-0140-0280-0090.html"
    },
    {
      "state": "NE",
      "name": "Nebraska",
      "act": "Nebraska Data Privacy Act (LB1074, 2024)",
      "citation": "Neb. Rev. Stat. 87-1111(5)",
      "effective": "2025-01-01",
      "displayRequired": false,
      "covers": "The sale of personal data and targeted advertising, through an authorized agent set by a browser setting or a global device setting.",
      "url": "https://nebraskalegislature.gov/laws/statutes.php?statute=87-1111"
    },
    {
      "state": "NH",
      "name": "New Hampshire",
      "act": "New Hampshire Data Privacy Act (NHDPA), RSA 507-H",
      "citation": "RSA 507-H:6, V(b) (as cited by NH DOJ)",
      "effective": "2025-01-01",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://www.doj.nh.gov/data-privacy-enforcement"
    },
    {
      "state": "NJ",
      "name": "New Jersey",
      "act": "New Jersey Data Privacy Act (P.L.2023, c.266)",
      "citation": "N.J.S.A. 56:8-166.11(b)(1) (P.L.2023, c.266, sec. 8.b.(1))",
      "effective": "2025-07-15",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://pub.njleg.state.nj.us/Bills/2022/PL23/266_.PDF"
    },
    {
      "state": "MD",
      "name": "Maryland",
      "act": "Maryland Online Data Privacy Act of 2024 (MODPA, SB 541 / Ch. 455)",
      "citation": "Md. Code Ann., Com. Law 14-4707(f)(3)(ii); see also 14-4706(a)(2) (agent via browser setting or global device setting)",
      "effective": "2025-10-01",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://mgaleg.maryland.gov/mgawebsite/Laws/StatuteText?article=gcl&section=14-4707&enactments=false"
    },
    {
      "state": "MN",
      "name": "Minnesota",
      "act": "Minnesota Consumer Data Privacy Act (MCDPA), Minn. Stat. 325M.10-325M.21",
      "citation": "Minn. Stat. 325M.14, subd. 3(a)",
      "effective": "2025-07-31",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://www.revisor.mn.gov/statutes/cite/325M.14"
    },
    {
      "state": "OR",
      "name": "Oregon",
      "act": "Oregon Consumer Privacy Act (OCPA), ORS 646A.570-646A.589",
      "citation": "ORS 646A.578(5)(c)",
      "effective": "2026-01-01",
      "displayRequired": false,
      "covers": "Targeted advertising and the sale of personal data.",
      "url": "https://www.oregonlegislature.gov/bills_laws/ors/ors646A.html"
    },
    {
      "state": "TX",
      "name": "Texas",
      "act": "Texas Data Privacy and Security Act (TDPSA, HB 4, 88th Leg.)",
      "citation": "Tex. Bus. & Com. Code 541.055(e)",
      "effective": "2025-01-01",
      "displayRequired": false,
      "covers": "The sale of personal data and targeted advertising, through an authorized agent set by a browser setting or a global device setting.",
      "url": "https://capitol.texas.gov/tlodocs/88R/billtext/html/HB00004F.htm"
    }
  ]
}