Do US privacy laws require opt-in or opt-out?

Most US state laws follow an opt-out model. Businesses must offer a way to opt out of the sale or sharing of personal information and honour Global Privacy Control signals, while sensitive data and minors may require stricter handling.

Are cookie banners required in the United States?

There is no general cookie consent requirement, but using trackers can trigger sale or sharing rules under state laws, which require a clear opt-out mechanism such as a Do Not Sell or Share link.

Amerika Utara

Persetujuan kuki di United States

Q: Is there a federal privacy law in the United States?

No. The United States has no comprehensive federal privacy law. It has a growing patchwork of state laws led by California's CCPA, plus FTC enforcement against unfair or deceptive practices.

Persetujuan dan undang-undang privasi di United States

The United States has no single federal privacy law. Instead it has a state-by-state patchwork led by California's CCPA as amended by the CPRA, joined by Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, and others. Most of these laws follow an opt-out model rather than the EU opt-in approach, so businesses must offer a Do Not Sell or Share My Personal Information link and honour Global Privacy Control signals. Sensitive data and minors often require stricter handling or opt-in. The FTC enforces against unfair and deceptive practices nationally, while state attorneys general enforce their own laws. There is no general cookie consent requirement, but tracking can trigger sale or sharing rules.

Pihak berkuasa

Federal Trade Commission (FTC) and state attorneys general

Status

No federal privacy law, a growing patchwork of state laws led by California's CCPA

Undang-undang utama

CCPA / CPRA

Bahasa

English

Siapa yang wajib mematuhi

For-profit businesses that meet revenue or data-volume thresholds and handle California residents' data.

Penalti

Varies by state, for example up to 7,500 US dollars per intentional CCPA violation

Kewajipan utama

Honor Do Not Sell or Share requests
Recognize Global Privacy Control signals
Provide a clear opt-out mechanism
Handle consumer rights requests
Limit use of sensitive personal information

Panduan tempatan

Treat the US as a state-by-state patchwork rather than one regime
Offer a Do Not Sell or Share My Personal Information link
Honour Global Privacy Control browser signals
Apply stricter handling for sensitive data and minors

Bagaimana ConsentX membantu

Native Global Privacy Control support
Do Not Sell or Share controls
Opt-out preference signals
45-day DSAR SLA workflow

Mula secara percuma

yoursite.com

United States

Kami menghargai privasi anda

Kami meminta persetujuan anda sebelum sebarang kuki bukan penting, mengikut peraturan yang terpakai di wilayah anda.

Benarkan semuaTolak yang bukan pentingUrus keutamaan

Persetujuan direkodkan

sha256 · chain ok

Halaman ini diterjemah secara mesin dan mungkin mengandungi kesilapan. Sila semak butiran undang-undang dengan penasihat guaman tempatan yang berkelayakan sebelum bergantung padanya.

Sediakan United States dengan ConsentX

Sepanduk mengikut wilayah, sekatan skrip awal, DSAR dan bukti kalis usik.

Mula secara percuma Tempah demo

Cara mematuhi United States dengan ConsentX

1
Imbas laman web anda
Jalankan imbasan percuma untuk mencari setiap kuki dan penjejak di laman anda, supaya anda tahu dengan tepat apa yang memerlukan persetujuan di bawah United States.
2
Paparkan sepanduk persetujuan mengikut wilayah
Tambah sepanduk ConsentX. Ia mengesan wilayah setiap pelawat dan memaparkan secara automatik pengalaman persetujuan yang dikehendaki United States.
3
Sekat penjejak sehingga ada persetujuan
Kekalkan kuki dan penjejak bukan penting dalam keadaan disekat sehingga pelawat bersetuju, supaya tiada apa-apa berjalan sebelum persetujuan.
4
Rekod bukti kalis usik
Setiap pilihan disimpan sebagai resit persetujuan kalis usik yang boleh anda kemukakan dalam audit United States.
5
Uruskan permintaan data tepat pada masanya
Gunakan aliran kerja DSAR terbina dengan pemasa SLA untuk menjawab permintaan akses, pemadaman dan penarikan diri dalam tempoh yang ditetapkan undang-undang.