• Privacy Laws We Support •

Every Privacy Law WPLP Covers, In One Place

GDPR, UK GDPR, the ePrivacy Directive, six US state laws, LGPD, PIPEDA, PDPL, and APP. See what each one asks of a WordPress site, and which parts of WPLP handle it.

Find the Law That Applies to Your Site

Most privacy laws apply based on where your visitors and customers are, not where your business is registered. The laws below are grouped by region — find yours, then see what it requires and how WPLP helps meet it.

Australia

12 Mar 2014

Australian Privacy Act / APPs

Businesses with over AUD 3M annual turnover, plus health providers and data traders of any size.

United States

1 Jan 2020 / 1 Jan 2023

California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

Businesses with $26.6M+ revenue, OR data on 100K+ CA consumers, OR 50%+ revenue from selling/sharing data.

United States

21 Apr 2000

Children's Online Privacy Protection Act (COPPA)

Sites aimed at children under 13, or that knowingly collect their data.

United States

1 Jul 2023

Colorado Privacy Act (CPA)

Data on 100K+ CO consumers, OR 25K+ plus any revenue from data sales.

United States

1 Jul 2023

Connecticut Data Privacy Act (CTDPA)

From 1 Jul 2026: data on 35K+ CT consumers, OR any sensitive data, OR sells data.

United Kingdom

25 May 2018

Data Protection Act (UK)

Organisations that process personal data in the UK (works with UK GDPR)

United States

1 Jan 2025

Delaware Personal Data Privacy Act

Data on 35K+ DE consumers, OR 10K+ plus 50%+ revenue from data sales

European Union

25 May 2018

General Data Protection Regulation (GDPR)

Organisations in the EU, or that offer goods to or track people in the EU

United States

1 Jan 2026

Indiana Consumer Data Protection Act

Data on 100K+ IN customers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Jan 2025

Iowa Consumer Data Protection Act

Data on 100K+ IA consumers OR 25K+ plus 50%+ revenue from data sales

United States

1 Jan 2026

Kentucky Consumer Data Protection Act

Data on 100K+ KY consumers, OR 25K+ plus 50%+ revenue from data sales

Brazil

18 Sept 2020

Lei Geral de Proteção de Dados (LGPD)

Any organization that processes data in Brazil or of people in Brazil

United States

1 Oct 2026

Maryland Online Data Privacy Act (MODPA)

Data on 35K+ MD consumers, OR 10K+ plus 20%+ revenue from data sales

United States

31 Jul 2025

Minnesota Consumer Data Privacy Act

Data on 100K+ MN consumers, OR 25K+ plus 25%+ revenue from data sales

United States

1 Oct 2024

Montana Consumer Data Privacy Act

Data on 25K+ MT consumers, OR 15K+ plus 25%+ revenue from data sales (limits cut Oct 2025)

United States

1 Jan 2025

Nebraska Data Privacy Act

Businesses in NE that are not SBA-defined small businesses. No volume threshold.

United States

1 Jan 2025

New Hampshire Privacy Act

Data on 35K+ NH consumers, OR 10K+ plus 25%+ revenue from data sales

United States

15 Jan 2025

New Jersey Data Privacy Act

Data on 100K+ NJ consumers, OR 25K+ plus any revenue from data sales

United States

1 Jul 2024

Oregon Consumer Privacy Act

Data on 100K+ OR consumers, OR 25K+ plus 25%+ revenue from data sales

Canada

1 Jan 2001 (fully 2004)

Personal Information Protection and Electronic Documents Act (PIPEDA)

Private businesses that collect personal data in commercial activity in Canada

United States

1 Jan 2026

Rhode Island Data Privacy Act

Data on 35K+ RI consumers, OR 10K+ plus 20%+ revenue from data sales

Saudi Arabia

14 Sept 2024

Saudi Arabia Personal Data Protection Law (PDPL)

Any organisation that processes data in Saudi Arabia or of its residents

United States

1 Jul 2025

Tennessee Information Protection Act

$25M+ revenue AND data on 175K+ TN consumers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Jul 2024

Texas Data Privacy and Security Act

Businesses in TX that are not SBA-defined small businesses. No volume threshold

United Kingdom

1 Jan 2021

UK GDPR

Any organisation that processes data in Saudi Arabia or of its residents

United States

31 Dec 2023

Utah Consumer Privacy Act (UCPA)

$25M+ revenue AND data on 100K+ UT consumers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Jan 2023

Virginia Consumer Data Protection Act (VCDPA)

Data on 100K+ VA consumers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Jan 2020 / 1 Jan 2023

California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

Businesses with $26.6M+ revenue, OR data on 100K+ CA consumers, OR 50%+ revenue from selling/sharing data.

United States

21 Apr 2000

Children's Online Privacy Protection Act (COPPA)

Sites aimed at children under 13, or that knowingly collect their data.

United States

1 Jul 2023

Colorado Privacy Act (CPA)

Data on 100K+ CO consumers, OR 25K+ plus any revenue from data sales.

United States

1 Jul 2023

Connecticut Data Privacy Act (CTDPA)

From 1 Jul 2026: data on 35K+ CT consumers, OR any sensitive data, OR sells data.

United States

1 Jan 2025

Delaware Personal Data Privacy Act

Data on 35K+ DE consumers, OR 10K+ plus 50%+ revenue from data sales

United States

1 Jan 2026

Indiana Consumer Data Protection Act

Data on 100K+ IN customers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Jan 2025

Iowa Consumer Data Protection Act

Data on 100K+ IA consumers OR 25K+ plus 50%+ revenue from data sales

United States

1 Jan 2026

Kentucky Consumer Data Protection Act

Data on 100K+ KY consumers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Oct 2026

Maryland Online Data Privacy Act (MODPA)

Data on 35K+ MD consumers, OR 10K+ plus 20%+ revenue from data sales

United States

31 Jul 2025

Minnesota Consumer Data Privacy Act

Data on 100K+ MN consumers, OR 25K+ plus 25%+ revenue from data sales

United States

1 Oct 2024

Montana Consumer Data Privacy Act

Data on 25K+ MT consumers, OR 15K+ plus 25%+ revenue from data sales (limits cut Oct 2025)

United States

1 Jan 2025

Nebraska Data Privacy Act

Businesses in NE that are not SBA-defined small businesses. No volume threshold.

United States

1 Jan 2025

New Hampshire Privacy Act

Data on 35K+ NH consumers, OR 10K+ plus 25%+ revenue from data sales

United States

15 Jan 2025

New Jersey Data Privacy Act

Data on 100K+ NJ consumers, OR 25K+ plus any revenue from data sales

United States

1 Jul 2024

Oregon Consumer Privacy Act

Data on 100K+ OR consumers, OR 25K+ plus 25%+ revenue from data sales

United States

1 Jan 2026

Rhode Island Data Privacy Act

Data on 35K+ RI consumers, OR 10K+ plus 20%+ revenue from data sales

United States

1 Jul 2025

Tennessee Information Protection Act

$25M+ revenue AND data on 175K+ TN consumers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Jul 2024

Texas Data Privacy and Security Act

Businesses in TX that are not SBA-defined small businesses. No volume threshold

United States

31 Dec 2023

Utah Consumer Privacy Act (UCPA)

$25M+ revenue AND data on 100K+ UT consumers, OR 25K+ plus 50%+ revenue from data sales

United States

1 Jan 2023

Virginia Consumer Data Protection Act (VCDPA)

Data on 100K+ VA consumers, OR 25K+ plus 50%+ revenue from data sales

United Kingdom

25 May 2018

Data Protection Act (UK)

Organisations that process personal data in the UK (works with UK GDPR)

United Kingdom

1 Jan 2021

UK GDPR

Any organisation that processes data in Saudi Arabia or of its residents

European Union

25 May 2018

General Data Protection Regulation (GDPR)

Organisations in the EU, or that offer goods to or track people in the EU

Canada

1 Jan 2001 (fully 2004)

Personal Information Protection and Electronic Documents Act (PIPEDA)

Private businesses that collect personal data in commercial activity in Canada

Australia

12 Mar 2014

Australian Privacy Act / APPs

Businesses with over AUD 3M annual turnover, plus health providers and data traders of any size.

Brazil

18 Sept 2020

Lei Geral de Proteção de Dados (LGPD)

Any organization that processes data in Brazil or of people in Brazil

Saudi Arabia

14 Sept 2024

Saudi Arabia Personal Data Protection Law (PDPL)

Any organisation that processes data in Saudi Arabia or of its residents

• Testimonials & Reviews •

What Real Users Say About WPLP Cookie Consent & Legal Pages

4.7/5 on WordPress.org • Based on 20,000+ active WordPress installs

Reliable WP Plugins & Compassionate Support

Hear from site owners, agencies and developers who simplified their WordPress legal compliance.

WPLP Cookie Consent is a reliable plugin for cookie consent and legal pages, offering strong performance and responsive customer support when issues arise.

The Cookie banner and Google consent mode seem to work well and I am pleased with the plug-in.

WPLP offers a reliable cookie consent solution backed by exceptional, knowledgeable, and responsive support.

• Clear Answers •

FAQs answering objections

Which of these laws does WPLP cover for free?

GDPR, CCPA, LGPD, and COPPA sit inside WPLP Legal Pages’ free template set and WPLP Cookie Consent’s free law set. UK GDPR, PIPEDA, PDPL, and APP need a paid Compliance Dashboard tier for cookie-consent-specific coverage.

Do I need to comply with more than one of these laws at once?

Often yes. A site with visitors in California and the EU may need to account for both CCPA and GDPR, regardless of where the business itself is based.

Does one plugin cover all of these laws automatically?

No single plugin makes a site automatically compliant with every law on its own. WPLP Legal Pages generates the privacy policy disclosures these laws require, and WPLP Cookie Consent handles consent-banner mechanics like Global Privacy Control, but the underlying business practices still matter.

Is there a dedicated page for PDPL or APP?

No. Both are covered as part of the Compliance Dashboard’s paid-tier regional law coverage, alongside PIPEDA and UK GDPR, rather than as a standalone page. This page and the Compliance Dashboard hub are where that coverage is documented.

How many privacy laws does WPLP support in total?

This page covers the laws with their own dedicated page today: GDPR, UK GDPR, the ePrivacy Directive, six US state laws, LGPD, and PIPEDA, plus PDPL and APP as paid-tier cookie-consent coverage with no standalone page.

What if my site's traffic comes from a country not listed here?

Not every country has a comprehensive privacy law yet, and this list reflects what WPLP currently supports, not every law that exists worldwide.

See Which Privacy Laws Apply to Your Site

Take the free compliance audit to see which of these laws your site’s traffic may already trigger, then publish the disclosures and banner coverage that meet them, on WordPress.