Applicable U.S. State Data Protection Laws

California Consumer Privacy Act of 2018, as amended, including as amended by the California Privacy Rights Act of 2020, Cal. Civ. Code § 1798.100 et seq. (as amended by Proposition 24, effective December 16, 2020), together with all implementing regulations (the “CCPA”)

Colorado Privacy Act, Colo. Rev. Stat. § 6-1-1301 et seq., together with all implementing regulations

Connecticut’s Act Concerning Data Privacy and Online Monitoring, Conn. Gen. Stat. § 42-515 et seq.

Delaware Personal Data Privacy Act, Del. Code tit. 6, § 12D-101 et seq.

Florida Digital Bill of Rights, Fla. Stat. § 501.701 et seq.

Indiana Consumer Data Protection Act, Ind. Code § 24-15-1 et seq. [Effective Jan. 1, 2026]

Iowa Consumer Data Protection Act, Iowa Code § 715D.1 et seq.

Kentucky Consumer Data Protection Act, KRS § 367.3611 et seq. [Effective January 1, 2026]

Maryland Online Data Privacy Act of 2024, MD. Commercial Law Code § 14-4701, et seq. [Effective October 1, 2025]

Minnesota Consumer Data Privacy Act, Minn. Stat §325O.01 et seq.

Montana Consumer Data Privacy Act, Mont. Code § 30-14-2801 et seq.

Nebraska Data Privacy Act, Neb. Rev. Stat. § 87-1101 et seq.

New Hampshire Privacy Law, N.H. Rev. Stat. 507-H

New Jersey Privacy Act, N.J. Stat. § 56:8-166.4 et seq.

Oregon Consumer Privacy Act, Or. Rev. Stat. § 646A.570 et seq.

Rhode Island Data Transparency and Privacy Protection Act, R.I. Gen. Laws § 6-48.1-1 et seq. [Effective January 1, 2026]

Tennessee Information Protection Act, Tenn. Code § 47-18-3201 et seq.

Texas Data Privacy and Security Act, Tex. Bus. & Com. Code § 541.001 et seq.

Utah Consumer Privacy Act, Utah Code § 13-61-101 et seq.

Virginia’s Consumer Data Protection Act, Va. Code § 59.1-575 et seq.