US State Privacy Laws
States are increasingly taking action to address consumer privacy. In 2018, California passed the California Consumer Privacy Act (CCPA), which took effect in 2020. That law was later amended by the California Privacy Rights Act (“CPRA”) on January 1, 2023. Since then, four other states (Virginia, Colorado, Connecticut, and Utah) have adopted omnibus consumer privacy laws, which take effect over the course of 2023, and others are considering similar laws. We collectively refer to these laws as the “State Privacy Laws.” These laws give residents of their states more control over their personal information. If your website is available to residents of those states or you are involved in the collection, processing, sale, or sharing of their personal information, then these laws might apply to you.
The following sections are available to help you understand your obligations under the State Privacy Laws and to help you prepare. This is informational only and Shopify can’t give you legal advice, so if you have any further questions, consult legal counsel.