US state privacy laws

U.S. states are increasingly taking action to address consumer privacy. In 2018, California passed the California Consumer Privacy Act (“CCPA”), which is a comprehensive privacy law that took effect in 2020. That law was later amended by the California Privacy Rights Act (“CPRA”) on January 1, 2023. Since then, nearly half of US states have adopted comprehensive consumer privacy laws, and other states are considering similar laws. We refer to these laws collectively as the “state privacy laws.” These state privacy laws give residents of certain US states more transparency and control over their personal information. If you make your store available to residents of those US states, then these laws might apply to your handling of personal information when residents of those states visit and transact with your store.

This section provides general information to merchants, who are responsible for reviewing and using this information appropriately. This section doesn't contain and isn't meant to provide legal advice.

In this section

Can’t find the answers you’re looking for? We’re here to help.