Legislation & Compliance

Every privacy framework Conzent supports — GDPR, CCPA, LGPD, PIPL, and 30+ more. Compare how each law differs and how Conzent handles them all.

Framework Comparison

See how the major privacy laws differ on the requirements that matter most

GDPR ePrivacy CCPA / CPRA
Consent Model Opt-in Opt-in Opt-out
Prior Consent Required ✓ Yes ✓ Yes ✗ No
Banner Required ✓ Yes ✓ Yes ✗ No
Equal Accept/Reject Prominence ✓ Yes ✓ Yes — N/A
Dark Patterns Prohibited ✓ Yes ✓ Yes ✓ Yes
Cookie Blocking Block all non-essential Block all non-essential None required
Do Not Sell Link ✗ No ✗ No ✓ Yes
Must Honor GPC ✗ No ✗ No ✓ Yes
IAB TCF Support ✓ Yes ✓ Yes ✗ No
Google Consent Mode v2 ✓ Yes ✓ Yes ✗ No
Consent Logging Required ✓ Yes ✓ Yes ✗ No
Children's Protection ✓ Yes ✓ Yes ✓ Yes
Max Penalty EUR 20M / 4% Varies by state USD 7,500/violation

Privacy Laws Are Not One-Size-Fits-All

More than 40 countries and US states have enacted privacy and cookie consent legislation — each with its own rules on consent models, cookie blocking, user rights, and enforcement. The differences are real: GDPR requires opt-in consent before any non-essential cookie fires, while CCPA allows cookies by default with an opt-out right. Some laws mandate a "Do Not Sell" link; others have never heard of it. GPC signals are legally binding in California and Colorado but ignored elsewhere.

Conzent handles every one of these differences automatically. When a visitor lands on your site, we detect their location, apply the correct legal framework, and show the right consent experience — with the right buttons, the right blocking behaviour, and the right signals. No manual configuration per country. No compliance gaps.

The table below compares the key requirements across major frameworks so you can see exactly what changes between them — and how Conzent adapts.

All Supported Frameworks

38+ privacy laws and counting

International & National Laws

GDPR
General Data Protection Regulation
Opt-in 2018 EU
ePrivacy Directive
Directive 2002/58/EC (amended by 2009/136/EC)
Opt-in 2002 EU
TDDDG / TTDSG
Telekommunikation-Telemedien-Datenschutz-Gesetz (Telecommunications Digital Services Data Protection Act)
Opt-in 2021 EU
CCPA / CPRA
California Consumer Privacy Act / California Privacy Rights Act
Opt-out 2020 US — CA
VCDPA
Virginia Consumer Data Protection Act
Hybrid 2023 US — VA
LGPD
Lei Geral de Proteção de Dados Pessoais
Opt-in 2020 Latam
POPIA
Protection of Personal Information Act
Opt-in 2021 Africa
UK GDPR + PECR
UK General Data Protection Regulation + Privacy and Electronic Communications Regulations
Opt-in 2021 UK
PIPEDA
Personal Information Protection and Electronic Documents Act
Hybrid 2000 Canada
Quebec Law 25
An Act to modernize legislative provisions as regards the protection of personal information
Opt-in 2023 Canada — QC
PIPL
Personal Information Protection Law
Opt-in 2021 Asia east
APPI
Act on the Protection of Personal Information
Opt-in 2003 Asia east
PIPA
Personal Information Protection Act
Opt-in 2011 Asia east
DPDPA
Digital Personal Data Protection Act
Opt-in 2023 Asia south
PDPA (Singapore)
Personal Data Protection Act
Hybrid 2012 Asia southeast
PDPA (Thailand)
Personal Data Protection Act B.E. 2562
Opt-in 2022 Asia southeast
UAE PDPL
Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law)
Opt-in 2022 Middle east
Saudi Arabia PDPL
Personal Data Protection Law
Opt-in 2023 Middle east
Australian Privacy Act
Privacy Act 1988 + Australian Privacy Principles (APPs)
Implied 1988 Oceania
NZ Privacy Act 2020
Privacy Act 2020
Implied 2020 Oceania

US State Privacy Laws

CPA
Colorado Privacy Act
Opt-out 2023 CO
CTDPA
Connecticut Data Privacy Act
Opt-out 2023 CT
UCPA
Utah Consumer Privacy Act
Opt-out 2023 UT
OCPA
Oregon Consumer Privacy Act
Opt-out 2024 OR
MCDPA (Montana)
Montana Consumer Data Privacy Act
Opt-out 2024 MT
TDPSA
Texas Data Privacy and Security Act
Opt-out 2024 TX
FDBR
Florida Digital Bill of Rights
Opt-out 2024 FL
DPDPA (Delaware)
Delaware Personal Data Privacy Act
Opt-out 2025 DE
Iowa CDPA
Iowa Consumer Data Protection Act
Opt-out 2025 IA
NJDPA
New Jersey Data Protection Act
Opt-out 2025 NJ
NHDPL
New Hampshire Data Privacy Law
Opt-out 2025 NH
Nebraska DPA
Nebraska Data Privacy Act
Opt-out 2025 NE
TIPA
Tennessee Information Protection Act
Opt-out 2025 TN
MCDPA (Minnesota)
Minnesota Consumer Data Privacy Act
Opt-out 2025 MN
MODPA
Maryland Online Data Privacy Act
Opt-out 2025 MD
ICDPA (Indiana)
Indiana Consumer Data Protection Act
Opt-out 2026 IN
KCDPA
Kentucky Consumer Data Protection Act
Opt-out 2026 KY
RIDTPPA
Rhode Island Data Transparency and Privacy Protection Act
Opt-out 2026 RI

Ready to be compliant everywhere?

Conzent handles every framework automatically — so you do not have to.