US state privacy · small business

Which privacy laws actually apply to your business?

20 US states now have consumer-privacy laws, each with different thresholds. Answer 3 questions and get a clear answer: which laws cover you, your exposure, and what to do next — a 2-minute self-serve check instead of a $300/hr consultant.

Free: which states apply No account Official sources cited
The rule

Same idea, 20 different thresholds

Most laws kick in at 100,000 residents' data — but not all. Getting this wrong is expensive: California alone fines up to $7,988 per intentional violation, and it adds up per consumer.

Common

Most states (Virginia, Colorado, Indiana, Kentucky…) apply once you process the data of 100,000+ residents — or fewer if you sell personal data.

Broadest

Texas has no revenue threshold: it applies to almost any business operating in Texas that isn't an SBA-defined "small business". Rhode Island triggers at just 35,000 residents.

Penalties

California (CCPA): up to $2,663 per unintentional and $7,988 per intentional violation (2026, inflation-adjusted). Enforced by the state AG and the CPPA.

Check · 3 questions

Do these laws apply to you?

Answer 3 questions and get your applicability, your risk level and the next step. Runs in your browser, no account.

Penalties are a moving target
California recalibrates CCPA fines for inflation every odd January. Next adjustment lands January 1, 2027 — and more states keep coming online.
--days
--hours
--min
Pricing

Free to find out. A few dollars for the full report.

One-time payment, no subscription. Way below a compliance consultant's hourly rate.

Free

$0
  • Which state laws apply to you
  • Your risk level at a glance
  • Links to official sources
Start free

Pro · full report

$9 one-time
  • Per-state obligations that apply to you
  • A prioritized compliance checklist
  • What to fix first to cut exposure

One-time payment in USDT/USDC. Price in USD; taxes per your country at checkout.

FAQ

Quick answers

Is this legal advice?

No. Privacy Fit is an educational tool that maps your situation against public state-law thresholds and points you to official sources. For a complex case, confirm with a privacy attorney.

Why not just hire a consultant?

You can — but most small businesses don't need $300/hr to answer "does this even apply to me?". This gives you that answer in 2 minutes, and the paid report tells you what to fix first.

How current is this?

Verified August 16, 2026: 20 states with comprehensive laws, including Indiana, Kentucky and Rhode Island effective January 1, 2026. Penalty figures are the CCPA's 2026 inflation-adjusted amounts.

Do you store my data?

The check runs in your browser. Payment is in crypto with no signup. We don't sell or share anything.

Official & primary sources

Where the numbers come from

Verified August 16, 2026.

  1. California Privacy Protection Agency — 2025/2026 inflation adjustments to CCPA fines ($2,663 / $7,988).
  2. MultiState — the 20 comprehensive state privacy laws in effect in 2026.
  3. IAPP — US State Privacy Legislation Tracker (status by state).