> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# US Data Privacy

> Comply with US state data privacy regulations including CCPA, CPRA, and emerging state laws.

US Data Privacy in DSALTA covers the growing patchwork of state-level data privacy regulations across the United States, including the California Consumer Privacy Act (CCPA/CPRA), Virginia CDPA, Colorado CPA, Connecticut CTDPA, and others.

## Who needs US Data Privacy compliance?

Any organization that collects personal information from US consumers, particularly those operating in or serving residents of states with active privacy legislation.

## Key US privacy laws

| Law           | State       | Key Requirements                                                      |
| ------------- | ----------- | --------------------------------------------------------------------- |
| **CCPA/CPRA** | California  | Consumer rights to access, delete, opt-out of sale; data minimization |
| **VCDPA**     | Virginia    | Consumer rights, data protection assessments, opt-out rights          |
| **CPA**       | Colorado    | Universal opt-out, data protection assessments                        |
| **CTDPA**     | Connecticut | Consumer rights, consent for sensitive data                           |
| **TDPSA**     | Texas       | Broad applicability, consumer data rights                             |

## How DSALTA helps

* **Unified privacy controls** covering requirements across multiple state laws
* **Privacy policy templates** that address multi-state compliance
* **Data processing documentation** for assessment requirements
* **Vendor management** to ensure processor compliance
* **Cross-framework mapping** — overlaps with GDPR privacy controls

**10** of DSALTA's automated checks contribute evidence to this framework, drawn from **3** integrations. Browse them in the [Compliance Tests](/tests/overview) catalog. They are linked through the controls each check satisfies, so a single check usually contributes to several frameworks at once — the count is not a list of checks unique to this one.

## Frequently asked questions

<AccordionGroup>
  <Accordion title="Do I need to comply with every state law?" icon="map">
    You need to comply with the laws of states where you do business or whose residents' data you process. DSALTA's unified approach covers common requirements across states.
  </Accordion>

  <Accordion title="How does US Data Privacy relate to GDPR?" icon="globe">
    US state privacy laws share concepts with GDPR (consumer rights, data minimization) but differ in specifics. DSALTA maps overlapping controls to reduce duplicate effort.
  </Accordion>
</AccordionGroup>

## Related pages

* [GDPR](/frameworks/gdpr/overview)
* [Active Frameworks](/guides/compliance/frameworks-active)