U.S. State Privacy Laws

Effective date: January 01, 2023

Last updated: September 18, 2023

The following state data privacy legislations take effect in 2023 or later:

  • Colorado Privacy Act (“CPA”)
  • Connecticut Data Privacy Act (“CTDPA”)
  • Delaware Personal Data Privacy Act (“DPDPA”)
  • Florida Digital Bill of Rights (“FDBR”) 
  • Indiana Consumer Data Protection Act (“INCDPA”) 
  • Iowa Consumer Data Protection Act (“IOCDPA”)
  • Montana Consumer Data Privacy Act (“MCDPA”)
  • Oregon Consumer Privacy Act (“OCPA”)
  • Tennessee Information Protection Act (“TIPA”)
  • Texas Data Privacy and Security Act (“TDPSA”)
  • Utah Consumer Privacy Act (“UCPA”)
  • Virginia Consumer Data Protection Act (“VCDPA”)

In this disclosure, “Personal Information” is defined to mean “information or data that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device, including but not limited to personally identifiable information.”

Colorado, Delaware and Oregon Residents

The CPA, DPDPA and OCPA do not apply to our nonprofit organization because we do not meet the thresholds.

The voluntary inclusion of this disclosure is done exclusively as an accommodation to our supporters and constituents in these states, and is not an admission of the ongoing application of the CPA, DPDPA and OCPA to our organization.

We do not sell your Personal Information and do not have any future plans to sell your Personal Information.

In the preceding twelve (12) months, we have not sold your Personal Information.

For additional information about our privacy practices, please read our Privacy Policy.

Connecticut, Florida, Indiana, Iowa, Montana, Tennessee, Texas, Utah, and Virginia Residents

The CTDPA, FDBR, INCDPA, IOCDPA, MCDPA, TIPA, TDPSA, UCPA, and VCDPA are not intended to apply to nonprofits. The voluntary inclusion of this disclosure is done exclusively as an accommodation to our supporters and constituents in Connecticut, Iowa, Virginia, and Utah, and is not an admission of the ongoing application of the CCTDPA, FDBR, INCDPA, IOCDPA, MCDPA, TIPA, TDPSA, UCPA, and VCDPA to our organization.

We do not sell your Personal Information and do not have any future plans to sell your Personal Information.

In the preceding twelve (12) months, we have not sold your Personal Information.

For additional information about our privacy practices, please read our Privacy Policy.

Nevada Residents

Our nonprofit organization does not offer an opt-out from the sale of Personal Information because we do not engage in the sale of Personal Information as contemplated by the Nevada Privacy Law (“NRS 603A”).

We do not sell your Personal Information and do not have any future plans to sell your Personal Information.

In the preceding twelve (12) months, we have not sold your Personal Information.

For additional information about our privacy practices, please read our Privacy Policy.