Arkansas – social media companies must use a third-party vendor to perform reasonable age verification before allowing access to their platforms. This verification could include requiring a digital copy of a driver’s license, government ID or other “commercially reasonable” method.
California – The company has annual gross revenues in excess of $25,000,000 OR annually buys, receives, sells or shares personal information of 50,000 or more consumers anywhere.
Colorado – Conducting business in Colorado targeting 100,000 residents OR derives revenue from the sale of personal data of 25,000 or more consumers (anywhere).
Connecticut – Conducting business in Connecticut targeting100,000 residents OR derives revenue from the sale of personal data of 25,000 or more consumers (anywhere).
Illinois – Conducting business in Illinois and collection of Biometric Identifiers of Illinois residents.
Indiana – Conducting business in Indiana targeting100,000 residents OR derives revenue from the sale of personal data of 25,000 or more consumers (anywhere).
Iowa – Conducting business in Iowa targeting100,000 residents OR derives revenue from the sale of personal data of 25,000 or more consumers (anywhere).
Nevada – Conducts business in Nevada.
Ohio – The company has 200 or more sales or transactions in Ohio OR has gross sales of $5,000.00 or more in Ohio.
Montana – Companies that do business in Montana and either: (1) control or process personal data of at least 50,000 state residents; OR (2) derive over 25% of gross revenue from the sale of personal data and control or process personal data of 25,000 or more state residents.
Tennessee – Conducting business in Tennessee and has annual gross revenues in excess of twenty-fie million dollars ($25,00,0000.00) AND processes the personal information of 25,000 consumers and derives more than 50% of gross revenue for the sale of personal information or process personal information of at least 175000 consumers per year.
Utah – Restrictions on Social Media Use by Minors AND to verify the age of any Utah resident.
Virginia – Conduct business in Virginia AND During a calendar year (i) control or process personal data of at least 100,000 consumers or (ii) control or process personal data of at least 25,000 consumers and derive over 50 percent of their gross revenue from the sale of personal data.
Washington – Any consumer health care data collection on a WA resident,
Please contact me to discuss your Privacy Policy if the criteria affects your posted Privacy Policy.