---
title: "CCPA &amp; US State Privacy Compliance | GTC"
description: "Senior attorneys map your obligations across CCPA/CPRA and the US state patchwork. Virginia, Colorado, Connecticut, Texas and more. Start with a scoped audit."
lang: en
json-ld: |
  [
    {
      "@context": "https://schema.org",
      "@type": "Organization",
      "name": "Global Trademark Company LLC",
      "url": "https://globaltrademarkcompany.com",
      "logo": "https://globaltrademarkcompany.com/gtc-logo.svg",
      "description": "Multi-practice IP and business legal firm. Trademarks in 100+ jurisdictions, patents in 10 + PCT, copyrights under Berne. Operating since 2016.",
      "foundingDate": "2016",
      "sameAs": [
        "https://www.linkedin.com/company/globaltrademarkcompany/",
        "https://www.trustpilot.com/review/globaltrademark.co"
      ],
      "contactPoint": [
        {
          "@type": "ContactPoint",
          "telephone": "+1-510-973-4964",
          "contactType": "customer service",
          "areaServed": "US",
          "availableLanguage": [
            "English"
          ]
        },
        {
          "@type": "ContactPoint",
          "telephone": "+44-7453-347853",
          "contactType": "customer service",
          "areaServed": "GB",
          "availableLanguage": [
            "English"
          ]
        },
        {
          "@type": "ContactPoint",
          "telephone": "+91-6397-329955",
          "contactType": "customer service",
          "areaServed": "IN",
          "availableLanguage": [
            "English",
            "Hindi"
          ]
        }
      ],
      "address": [
        {
          "@type": "PostalAddress",
          "streetAddress": "712 H Street NE, Suite 2094",
          "addressLocality": "Washington",
          "addressRegion": "DC",
          "postalCode": "20002",
          "addressCountry": "US"
        },
        {
          "@type": "PostalAddress",
          "streetAddress": "YSC Complex, 4th floor, A-400, 12 Ajit Singh House, Sri Aurobindo Marg",
          "addressLocality": "New Delhi",
          "addressRegion": "Delhi",
          "postalCode": "110016",
          "addressCountry": "IN"
        }
      ]
    },
    {
      "@context": "https://schema.org",
      "@type": "Service",
      "name": "CCPA & US State Privacy Compliance",
      "serviceType": "CCPA & US State Privacy Compliance",
      "description": "Senior attorneys map your obligations across CCPA/CPRA and the US state patchwork. Virginia, Colorado, Connecticut, Texas and more. Start with a scoped audit.",
      "provider": {
        "@type": "LegalService",
        "name": "Global Trademark Company",
        "url": "https://globaltrademarkcompany.com"
      },
      "offers": {
        "@type": "Offer",
        "description": "GTC's fee is quoted by scope. Government and filing fees, where any apply, are charged at cost."
      }
    },
    {
      "@context": "https://schema.org",
      "@type": "BreadcrumbList",
      "itemListElement": [
        {
          "@type": "ListItem",
          "position": 1,
          "name": "Home",
          "item": "https://globaltrademarkcompany.com/"
        },
        {
          "@type": "ListItem",
          "position": 2,
          "name": "Data Privacy & Technology",
          "item": "https://globaltrademarkcompany.com/services/data-privacy-technology"
        },
        {
          "@type": "ListItem",
          "position": 3,
          "name": "CCPA & US State Privacy Compliance",
          "item": "https://globaltrademarkcompany.com/services/ccpa-us-state-privacy"
        }
      ]
    },
    {
      "@context": "https://schema.org",
      "@type": "FAQPage",
      "mainEntity": [
        {
          "@type": "Question",
          "name": "Do US state privacy laws apply to a small company?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Each state sets its own thresholds, usually based on the number of consumers processed and revenue. Many state laws apply at around 100,000 consumers, and California applies above set revenue or consumer thresholds. The audit tells you exactly which laws apply to you."
          }
        },
        {
          "@type": "Question",
          "name": "Can I reuse my GDPR policy for the US?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Mostly no. The concepts overlap but the obligations differ. The CCPA idea of a 'sale' has no real GDPR equivalent, US states require specific notice formatting, and the US has no GDPR-style lawful-basis framework. We adapt rather than copy across."
          }
        },
        {
          "@type": "Question",
          "name": "What about a future federal privacy law?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "A federal privacy law has been proposed in Congress but is not in force. We track federal proposals and will advise you if and when one passes. In the meantime, state obligations apply now and should not wait on a federal bill."
          }
        },
        {
          "@type": "Question",
          "name": "Do I have to honour the Global Privacy Control signal?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "In several states, including California, Colorado and Connecticut, the Global Privacy Control browser signal must be honoured as a valid opt-out request. This is configured at the consent-management platform level, which we set up as part of the build."
          }
        },
        {
          "@type": "Question",
          "name": "What is the enforcement risk?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "California's privacy agency and several state attorneys general are actively enforcing. Penalties are assessed per violation and per consumer, so exposure adds up across a large user base. A clean programme is the practical way to manage that risk."
          }
        },
        {
          "@type": "Question",
          "name": "Am I 'selling' personal information without realising it?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Possibly. Under CCPA/CPRA, a 'sale' is any disclosure of personal information for monetary or other valuable consideration, which is broad enough to catch many ad-tech, analytics and data-enrichment setups. The audit checks where this applies and builds the right opt-out path."
          }
        }
      ],
      "dateModified": "2026-06-15"
    }
  ]
---

[](/)

-   Trademarks
-   Patents
-   Copyrights
-   Data Privacy
-   Business Legal
-   [Pricing](/pricing)
-   Resources

Sign inEN · USD 

Sign in 

1.  [Home](/)
2.  [Data Privacy & Technology](/services/data-privacy-technology)
3.  US state privacy

US State Privacy Compliance 

# A dozen US state privacy laws. One coherent compliance plan. 

California, Virginia, Colorado, Connecticut, Utah, Texas and more. Every state writes its own rulebook. We map your obligations, build the opt-out and consumer-rights workflows, and keep the programme current as new states pass laws.

From $1,200  Quoted by scope after a short data-practices review

[Start Your Privacy Review](/forms/catalog/data-privacy-technology/ccpa-us-state-privacy?ref=b2c)

[Excellent Trustpilot ](https://www.trustpilot.com/review/globaltrademark.co)

 ![Privacy attorney mapping US state data-protection obligations in a bright modern office](/img/home/hero-library/m-consult-bright-call-480.jpg)

Every state mapped

CCPA + the patchwork

Opt-outs built

GPC + Do-Not-Sell

Kept current

As new states pass laws

Legal team

GTC's privacy team

Data-protection counsel

Legal team

GTC's privacy team

Data-protection counsel

10,856+  clients 11  attorneys 5  offices 

10,856+  clients 11  attorneys 5  offices 10+  years 

IIPLA Top IP Consultancy 2026 [Upwork · Top Rated Plus ](https://www.upwork.com/freelancers/zamanzaidi)

Trusted by founders and brands worldwide

![Atlys](/assets/atlys-B5BookJo.webp "Atlys")![Perfora](/assets/perfora-D4_346Y2.webp "Perfora")![Soxco](/assets/soxco-D31kWMAz.webp "Soxco")![BossCare](data:image/webp;base64,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 "BossCare")![Innovist](/assets/innovist-BgYdG_yd.webp "Innovist")![Bacardi](/assets/bacardi-JU27gvk6.webp "Bacardi")![Footcare Lab](/assets/footcarelab-BLfB0WJu.webp "Footcare Lab")![Bare Anatomy](/assets/bare-anatomy-CBhgu9Ro.webp "Bare Anatomy")![Freedom](/assets/freedom-confectionery-HioHiGYc.webp "Freedom")

How it works

## From a state-by-state patchwork to one defensible programme 

1

### State-law audit

We map which state privacy laws apply to you, using each state's volume thresholds and activity tests, and write up where you are exposed today.

2

### Strategy call

A short call to set your unified-baseline strategy. Build to the strictest applicable standard, then layer state-specific exceptions on top, and agree priorities.

3

### Build and maintain

We draft the notice, stand up opt-out and consumer-rights workflows, and add vendor contract terms. An optional retainer keeps the programme current as new states pass laws.

What it costs

## Quoted by scope

CCPA & US State Privacy Compliance starts from $1,200. GTC's fee is quoted after a short review of your data practices and the states in scope, then confirmed before any work begins. The figure shown on this page is a live anchor from our catalog. Where any government or filing fees apply, they are charged at cost.

What's included

-   State-by-state applicability analysis using volume thresholds and activity tests 
-   Unified privacy notice covering every applicable state 
-   'Do Not Sell or Share My Personal Information' workflow 
-   Universal Opt-Out Mechanism and Global Privacy Control configuration 
-   Sensitive Personal Information handling under CPRA, CPA and CTDPA 
-   Profiling and automated-decision-making disclosures and opt-outs 
-   Consumer-rights workflow: access, delete, correct and port 
-   Vendor service-provider and processor contract terms 
-   Data Protection Assessments where a state requires them 

US state privacy programme

Quoted by scope

Optional maintenance retainer

Quoted by scope

Government or filing fees, if any

At cost

Compliance is ongoing rather than a one-time outcome. We build the programme and, with an optional retainer, keep it current as new state laws take effect.

Get started

### Get CCPA and US state-privacy ready

Tell us about your data practices and a GTC attorney will scope your US state-privacy compliance and email a quote.

No payment required  Reply within 1 business day A GTC attorney reviews it & sends a flat-fee quote. 

1.  01 Brand details 
    
2.  02 Documents 
    
3.  03 Your details 
    

Compliance is ongoing. We build the programme and, with an optional retainer, keep it current as new states pass laws.

Brand details

1

What is your business called?\* 

Your company or product name — we use it to label the matter. 

2

What do you need help with?\* 

Pick the closest. California's CCPA/CPRA and other US state laws give consumers rights over their personal data. 

3

Which states' laws apply to you?

Based on where your customers live. Not sure? Tick the closest — thresholds vary by state and we will confirm. 

4

What kinds of personal data do you handle?

Sensitive categories — health, children's, biometric — carry stricter rules. 

5

Do you sell or share personal data, or run targeted ads?

Selling or sharing data, or running targeted advertising, triggers opt-out obligations under CCPA/CPRA. 

BackNext

Why GTC

## Why companies bring US state privacy to GTC 

Legal team

GTC's privacy team

Data-protection counsel

Attorney-led

### Built to the strictest standard

One privacy notice and one set of workflows, built to the strictest applicable state rule, then adjusted for each state's exceptions. The result is defensible everywhere you operate.

### Opt-out done correctly

We configure the 'Do Not Sell or Share My Personal Information' workflow and the Universal Opt-Out Mechanism, including Global Privacy Control browser signals, at the consent-platform level.

### Sensitive data handled right

We map each sensitive-PI category under CPRA, CPA and CTDPA to your actual collection, then build the consent, limit-use and opt-out flows each state requires.

### Kept current as states pass laws

The US patchwork grows every legislative session. An optional retainer tracks new state laws and federal proposals and updates your programme before they take effect.

Your Customer Success Team

## A dedicated team that owns your matter from start to finish.

Every GTC client gets a dedicated Account Manager and a Senior Account Manager who learn your business and stay with you from first email to final filing. They are named people who pick up the phone and already know your matter, so every step moves forward without delay.

### Your Account Manager

Your day-to-day point of contact, who coordinates every matter, keeps things moving, and already knows your file. They have your full history, so you start every conversation where the last one left off.

### Your Senior Account Manager

Senior oversight on strategy and escalations, stepping in as your needs grow, so every important detail stays on track.

A named person, on email or a call, at every step.

![Your dedicated GTC Customer Success Team](/assets/m-onboarding-bright-welcome-C-heDolY.jpg)

How we compare

## GTC vs a template vs a big consultancy

What you get

GTC

Online filing services

Doing it yourself

Multi-state mapping across CCPA/CPRA, VA, CO, CT, TX and more

Universal Opt-Out Mechanism and Global Privacy Control configured

Sensitive personal information handling per state

Consumer-rights workflow: access, delete, correct, port

Vendor service-provider and processor contract terms

Drafted and reviewed by senior attorneys, quoted by scope

Multi-state mapping across CCPA/CPRA, VA, CO, CT, TX and more

GTC

Online filing services

Doing it yourself

Universal Opt-Out Mechanism and Global Privacy Control configured

GTC

Online filing services

Doing it yourself

Sensitive personal information handling per state

GTC

Online filing services

Doing it yourself

Consumer-rights workflow: access, delete, correct, port

GTC

Online filing services

Doing it yourself

Vendor service-provider and processor contract terms

GTC

Online filing services

Doing it yourself

Drafted and reviewed by senior attorneys, quoted by scope

GTC

Online filing services

Doing it yourself

The timeline

## What to expect

A typical US state privacy engagement moves from audit to a working programme in a few weeks. Timing depends on the number of states in scope and your data practices.

1.  Days 1–2 
    
    ### State-law audit
    
    We map applicable state laws using volume and activity thresholds and deliver a written read on your exposure.
    
2.  Day 3 
    
    ### Strategy call
    
    A 30-minute call to choose your unified-baseline strategy and prioritise the build.
    
3.  Weeks 1–4 
    
    ### Build
    
    Privacy notice, opt-out and consumer-rights workflows, and vendor contract terms are drafted and put in place.
    
4.  Ongoing 
    
    ### Maintain
    
    An optional retainer keeps the programme aligned as new states pass laws and enforcement evolves.
    

In their words

## All your legal, in one place. 

One accountable team across every practice, operating since 2016.

[Excellent Trustpilot ](https://www.trustpilot.com/review/globaltrademark.co)

10,856+

Clients served

11

In-house attorneys

5

Global offices

10+

Years since 2016

CCPA & US State Privacy Compliance FAQ

## Frequently asked questions

Do US state privacy laws apply to a small company? 

Each state sets its own thresholds, usually based on the number of consumers processed and revenue. Many state laws apply at around 100,000 consumers, and California applies above set revenue or consumer thresholds. The audit tells you exactly which laws apply to you.

Can I reuse my GDPR policy for the US? 

What about a future federal privacy law? 

Do I have to honour the Global Privacy Control signal? 

What is the enforcement risk? 

Am I 'selling' personal information without realising it? 

[Start Your Privacy Review](/forms/catalog/data-privacy-technology/ccpa-us-state-privacy?ref=b2c)

Related services

## Build the rest of your privacy programme

US state privacy works best alongside the user-facing notices and the global baseline that surround it.

[

### Privacy Policy & Terms of Service

Get the user-facing notice and terms right across every state where you operate.

View privacy policy drafting

](/services/privacy-policy-terms)[

### GDPR Compliance

If you also have EU users, start here for the global baseline that US state rules layer onto.

View GDPR compliance

](/services/gdpr-compliance)[

### Data, Privacy & Technology

See the full set of privacy, security and technology services GTC handles directly.

View all services

](/services/data-privacy-technology)

Start your US state privacy programme

## Ready when you  are.

Send us your data practices and a senior attorney will map your obligations across CCPA/CPRA and the US state patchwork, then scope a flat-fee programme that satisfies the strictest state in your footprint.

[Book My Free 30-Min Consult](/free-consultation)[Or Send Us a Message](/contact)

![GTC counsel on a client consultation call](/assets/m-client-call-bright-iWHveXAG.jpg)

## Site footer

![Global Trademark Company](/assets/gtc-logo-white-DQ8YcvVd.svg)

Secure Every Step of Your Growth

Trusted by brands since 2016

[hello@globaltrademarkcompany.com ](mailto:hello@globaltrademarkcompany.com)

[](https://www.linkedin.com/company/globaltrademarkcompany/)

[+1 510-973-4964 (US & International) ](tel:+15109734964)[+44 7453 347853 (UK & EU) ](tel:+447453347853)[+91 6397-329955 (India) ](tel:+916397329955)

### Company

-   [About us](/about)
-   [Contact](/contact)
-   [Our lawyers](/lawyers)
-   [Case studies](/case-studies)
-   [Careers](/careers)
-   [Press](/press)
-   [B2B partners](/b2b-partners)
-   [GTC Advantage](/gtc-advantage)

### Services

-   [All services →](/services)
-   [US trademark](/services/us-trademark)
-   [Madrid Protocol](/services/madrid-protocol-filing)
-   [Patent filing](/services/patent-filing)
-   [Copyright registration](/services/copyright-registration)
-   [Commercial contracts](/services/nda-drafting)
-   [Fractional GC](/services/fractional-gc)
-   [Data privacy](/services/gdpr-compliance)

### Resources

-   [Blog](/blog)
-   [Trademark Glossary](/resources/glossary)
-   [Country Guides](/resources/country-guides)
-   [Specimen Guide](/resources/specimen-guide)
-   [Class Assist](/class-assist)
-   [Free TM Check](/free-trademark-check)
-   [Free Consultation](/free-consultation)
-   [Reviews on Trustpilot](https://www.trustpilot.com/review/globaltrademark.co)

### Get Started

-   [Login](/login)
-   [Sign up](/signup)
-   [Application status](/application-status)
-   [Terms of service](/terms)
-   [Privacy policy](/privacy)
-   [Refund & credit policy](/refund-policy)
-   [Sitemap](/sitemap)

### Our Offices

United States

712 H Street NE, Suite 2094  
Washington DC 20002

India

4th Floor, A-400, 12 Ajit Singh House  
Sri Aurobindo Marg, New Delhi 110016

European Union

Iskar 75 Str., office 2  
Sofia, Bulgaria

China

2nd floor No. 51 Zhongshan Yi Road  
Guangzhou, China

United Kingdom

Unit 1A, 1 Bridge Road  
Camberley, Surrey GU15 2QR

We accept: 

![Visa](/assets/visa-logo-DngOCJX3.webp)

![Apple Pay](data:image/webp;base64,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)

Stripe 

Payoneer 

Wire 

[Trustpilot](https://www.trustpilot.com/review/globaltrademark.co)

© 2026 Global Trademark Company LLC. All rights reserved.

[Legal Notice](/terms)[Privacy Policy](/privacy)[Cookie Policy](/cookies)[Refund Policy](/refund-policy)Cookie Settings

Hi! How can we help you today?

Cookies help us improve the site. We use cookies to improve your experience, analyze site traffic, and personalize content.  [Learn more](/cookies)

Manage Manage Preferences RejectAccept