One pixel. Privacy laws across the world.
Your visitors come from everywhere — and the law that applies depends on where they are. Click any region to see which privacy and consent laws ConsentPixel covers for your customers, and what's coming next.
United States — state privacy & consent laws ConsentPixel covers
What "covered" means
We show coverage honestly, in three tiers — so you always know exactly what ConsentPixel enforces today and what's on the way.
Live in the product
Fully implemented in the pixel, banner, and consent engine — pre-consent blocking, consent logging, and portal configuration. Active for every customer.
- GDPR
- CCPA / CPRA
- CIPA
- Consent Mode v2
- TCF 2.3
- 19 US state laws
Core engine covers it
The standard consent flow handles the core opt-out requirements. Dedicated state-specific scanner rules and portal guidance are in progress.
- VCDPA (Virginia)
- CPA (Colorado)
On the roadmap
Identified and prioritised for future releases. Shown here so you can see where coverage is heading.
- EU AI Act
- CTDPA
- LGPD
- Quebec Law 25
- UCPA
- ePrivacy Reg.
GDPR Compliance for Websites 2026
Complete GDPR guide for website owners, including consent, cookies, legal bases, data processing and penalties.
CCPA & CPRA Compliance for Websites 2026
Requirements, consumer rights, opt-outs, dark patterns, DSAR requests and enforcement guidance.
CIPA Explained
Understand CIPA lawsuits, session replay tools, chat widgets, analytics risks and compliance requirements.
Google Consent Mode v2 - Complete Guide 2026
If you use Google Analytics, Google Ads, or any Google tag on a website with EU or UK visitors, Consent Mode v2 is mandatory.
Virginia Consumer Data Protection Act (VCDPA)
Virginia's comprehensive privacy law has been in effect since January 1, 2023.
Colorado Privacy Act (CPA)
Colorado's comprehensive privacy law has been in effect since July 1, 2023 — and it goes further than most.
CTDPA — Connecticut
Connecticut's data privacy law has been in effect since July 1, 2023 — and it goes further than most US state laws on two fronts.
IAB TCF 2.3
If your site earns money from programmatic advertising in Europe, the Transparency & Consent Framework decides whether your ad partners trust your consent signals.
COPPA Compliance
COPPA governs data collection from children under 13 — and the FTC's 2025 amendments raised the bar on third-party tracking. ConsentPixel controls which trackers fire.
DMA Compliance
The DMA makes explicit consent central to how the biggest platforms combine user data. Even if you're not a gatekeeper, it changes what consent your ad tools need.
DPDPA Compliance
Delaware's law has one of the lowest thresholds in the country — 35,000 consumers — and even covers many nonprofits. ConsentPixel makes compliance a one-pixel install.
FADP Compliance
Switzerland's revised Federal Act on Data Protection reaches businesses worldwide that serve Swiss visitors. ConsentPixel makes compliance a one-pixel install.
FDBR Compliance
Florida's privacy law targets the largest tech companies — a $1B revenue threshold. If you're in scope, ConsentPixel makes compliance a one-pixel install.
Global Privacy Control (GPC)
A growing list of US state laws require you to honor GPC. ConsentPixel detects and respects it automatically — and logs every signal.
ICDPA Compliance
Iowa's law is among the most business-friendly, with a generous 90-day response and cure window. ConsentPixel makes compliance a one-pixel install.
LGPD Compliance
Brazil's LGPD reaches businesses worldwide that serve Brazilian visitors. ConsentPixel delivers geo-aware consent, documents, and audit-ready logs in one install.
Meta Pixel Consent
The Meta Pixel can only collect data when a visitor consents. ConsentPixel controls when it fires — automatically, by each visitor's choice and location.
Microsoft UET Consent Mode
Keep your Microsoft Advertising conversion tracking measurable and lawful. ConsentPixel passes UET consent signals automatically, based on each visitor's choice and location.
MTCDPA Compliance
Montana's low thresholds reach a wide range of businesses, and a 2025 amendment removed the cure period. ConsentPixel makes compliance a one-pixel install.
NDPA Compliance
Like the Texas law it's modeled on, Nebraska's NDPA has no revenue threshold. ConsentPixel makes compliance a one-pixel install.
PIPEDA Compliance
Canada's PIPEDA governs how private-sector organizations handle personal information. ConsentPixel delivers meaningful consent, documents, and audit-ready logs.
POPIA Compliance
South Africa's POPIA governs how you collect and use personal information about people in South Africa. ConsentPixel makes compliance a one-pixel install.
TDPSA Compliance
Texas's privacy law has no revenue threshold — it reaches almost every business that isn't a small business. ConsentPixel makes compliance a one-pixel install.
UCPA Compliance
Utah runs one of the most business-friendly privacy frameworks in the country. ConsentPixel makes compliance a one-pixel install.
India's DPDP Act
India's first comprehensive data-protection law is consent-first and extraterritorial — it reaches any business offering goods or services to people in India.
Maryland's MODPA Act
Maryland's privacy law is not just another state opt-out statute. It sets a higher bar than most — limiting what you can collect at all, banning the sale of sensitive data outright, and applying to far smaller businesses than other states.
Quebec's Law 25
Most of North America runs on an opt-out model. Quebec doesn't. Law 25 requires explicit, GDPR-style opt-in consent before you track visitors — making it the strictest consent regime on the continent, and a real obligation for any site with Quebec visitors.
Louisiana Data Privacy Act (LDPA)
Louisiana's first comprehensive consumer privacy law — enacted as Act 502 — takes effect January 1, 2027. Here's who it covers, what rights it grants, and how to make your site compliant before the deadline.
UK Cookie Law
PECR fines rose from £500,000 to £17.5 million under the Data Use and Access Act. The ICO finalised new tracking technology guidance in April 2026. ConsentPixel handles PECR, UK GDPR, and Google Consent Mode v2 — one pixel, no developer required.
Germany Cookie Compliance
Germany is the only major EU market where a bad Cookie-Banner can be attacked from two directions at once: by one of 16 state data protection authorities, and — since the Federal Court of Justice ruled in March 2025 — by your own competitors.
Netherlands Cookie Compliance
Dutch cookie rules run on two laws at once — the Telecommunicatiewet and the AVG (the Dutch name for GDPR). The Autoriteit Persoonsgegevens now scans roughly 10,000 Dutch websites a year with dedicated government funding, and warns 500 organisations annually.
See what applies to your site
Run a free scan and find out which trackers fire before consent — and which of these laws your site needs to satisfy.
Scan your site freeCoverage reflects current product capabilities and is updated as we ship. This page is for general information and is not legal advice; the laws that apply to your site depend on your specific circumstances. For advice on your obligations, consult a qualified privacy professional.