Privacy Matrix
State Privacy Applicability Matrix
Living state-by-state reference, kept out of the policy so the policy does not go stale as state law changes.
§9.3.C CISO
Planned content
  • State, statute name and citation
  • Effective date
  • Applies to the Company: yes, no, monitoring
  • AI-specific provisions: automated decision-making, profiling, disclosure
  • Obligations exceeding the CCPA/CPRA baseline
  • Last reviewed date
CCPA/CPRA is the baseline applied to all US consumer data processing. This matrix tracks only where a state exceeds it. Reviewed annually and after any material new enactment (§9.3.D).