Generate your Privacy Policy for free, Get started now →

PrivacyTerms.io Blog

The Compliance Brief

Plain-English guides to privacy policies, terms and conditions, disclaimers, and data protection law, helping your business stay compliant.

100,000 Consumers: Utah, Iowa, Indiana Privacy Scope

100,000 Consumers: Utah, Iowa, Indiana Privacy Scope

Utah, Iowa, and Indiana all trigger privacy-law coverage at 100,000 processed consumers a year, but Utah's Consumer Privacy Act is the only one of the three that also requires $25 million or more in annual revenue, per the enrolled Utah Senate Bill and Iowa's codified statute. See the full threshold, cure-period, and penalty comparison for all three laws.

Read article
$7,500 Per Violation: Virginia CDPA Enforcement 2026

$7,500 Per Violation: Virginia CDPA Enforcement 2026

Virginia's Consumer Data Protection Act caps civil penalties at $7,500 per violation and covers any business controlling data on 100,000 or more Virginia consumers, per Code of Virginia section 59.1-584. See how VCDPA's cure period, threshold, and 2026 scope expansions compare to the three other states that followed Virginia into effect in 2023.

Read article