
Does GDPR Apply to US Companies? Article 3 Explained (2026)
GDPR applies to US companies that target or monitor people in the EU under Article 3(2). Learn the scope test, EU representative rule, and how to comply.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
8309 articles
Browse by Category →
GDPR applies to US companies that target or monitor people in the EU under Article 3(2). Learn the scope test, EU representative rule, and how to comply.

EU AI Act bans social scoring, facial scraping, and workplace emotion recognition since Feb 2025. Layers onto GDPR, demands FRIAs, and carries EUR 35M fines.

The CTDPA (Conn. Gen. Stat. § 42-515 et seq.) is Connecticut's comprehensive data privacy law, effective July 1, 2023. Learn who it covers, consumer rights, the universal opt-out deadline, and penalties.

Connecticut residents have five CTDPA rights: access, correct, delete, portability, and opt-out. Learn step-by-step how to submit requests, use GPC, appeal denials, and file a complaint with the CT AG.

Step-by-step CTDPA compliance checklist: applicability thresholds, privacy notice requirements, sensitive data opt-in consent, universal opt-out signals, data protection assessments, processor contracts, and AG enforcement rules for Connecticut businesses.

Colorado Privacy Act (2023): 5 consumer rights, mandatory GPC opt-out, up to $20,000/violation. Learn who it covers, 2025-26 amendments, and enforcement rules.

Colorado residents have seven CPA rights: access, correct, delete, portability, and opt-out of targeted ads, data sales, and profiling. Learn how to submit requests, use GPC, appeal denials, and file an AG complaint.

Step-by-step Colorado Privacy Act compliance checklist: applicability thresholds, the nonprofit coverage trap, privacy notice, GPC Universal Opt-Out, sensitive data consent, data protection assessments, processor contracts, and AG enforcement.

The VCDPA (Va. Code Ann. § 59.1-575) is Virginia's comprehensive data privacy law, effective Jan 1, 2023. Learn who it covers, consumer rights, and penalties.

Virginia residents have five VCDPA rights: access, correct, delete, portability, and opt-out. Learn how to submit requests, appeal denials, and escalate to the VA AG.

Step-by-step VCDPA compliance checklist: applicability thresholds, sensitive data opt-in consent, data protection assessments, processor contracts, and AG enforcement rules for Virginia businesses.

Washington SSB 5886 takes effect June 11, 2026, adding a forged digital likeness to RCW 63.60. The new AI deepfake law covers real-time voice and video clones and allows noneconomic damages.