Applicable U.S. State Data Protection Laws

California Consumer Privacy Act of 2018, as amended, including as amended by the California Privacy Rights Act of 2020, Cal. Civ. Code § 1798.100 et seq. (as amended by Proposition 24, effective December 16, 2020), together with all implementing regulations (the “CCPA”)

Colorado Privacy Act, Colo. Rev. Stat. § 6-1-1301 et seq., together with its implementing regulations

Connecticut’s Act Concerning Data Privacy and Online Monitoring, Pub. Act No. 22015

Florida Digital Bill of Rights, Fla. Stat. § 501.701 et seq.

Delaware Personal Data Privacy Act, Del. Code tit. 6, § 12D-101 et seq. (2023)

Indiana Consumer Data Protection Act, Ind.Code § 24-15-1 et seq.

Iowa Data Protection Act, Iowa Code § 715D.1 et seq.

Montana Consumer Data Privacy Act, S.B. 384, 2023 Leg., 68th Sess.

Oregon Consumer Privacy Act, S.B. 619, 2023 Leg., 82nd Assemb.

Tennessee Information Protection Act, Tenn. Code Ann. § 47-18-3201 et seq.

Texas Data Privacy and Security Act, Tex. Bus. & Com. Code § 541.001 et seq.

Utah Consumer Privacy Act, Utah Code Ann. § 13-61-101 et seq.

Virginia’s Consumer Data Protection Act, Va. Code Ann. § 59.1-575 et seq.