Global Compliance Coverage

    One platform. Every regulation, everywhere.

    CookieLet auto-tunes banners and consent logs to each visitor's jurisdiction β€” from GDPR in Berlin to CCPA in California.

    40+

    Jurisdictions

    4

    Frameworks

    20+

    Languages

    24/7

    Live monitoring

    CookieLet
    πŸ‡ͺπŸ‡Ί

    GDPR

    EU & UK

    πŸ‡ΊπŸ‡Έ

    CCPA / CPRA

    California, USA

    πŸ‡¨πŸ‡¦

    PIPEDA

    Canada

    πŸ‡§πŸ‡·

    LGPD

    Brazil

    πŸ‡¨πŸ‡­

    nFADP

    Switzerland

    πŸ‡ΏπŸ‡¦

    POPIA

    South Africa

    πŸ‡ͺπŸ‡Ί European Union & πŸ‡¬πŸ‡§ United Kingdom

    GDPR (General Data Protection Regulation)

    The gold standard of privacy. Under both EU and UK versions, websites must obtain explicit, opt-in consent before firing any non-essential cookies.

    • β€’Key Requirement: "Opt-in" by default. No pre-ticked boxes.
    • β€’User Rights: Right to access, delete (be forgotten), and withdraw consent as easily as they gave it.

    πŸ‡ΊπŸ‡Έ United States (State-Level Laws)

    CCPA / CPRA (California)

    The most comprehensive US law. It focuses on the right to "Opt-Out" of the sale or sharing of personal information.

    • β€’Key Requirement: A visible "Do Not Sell or Share My Personal Information" link.
    • β€’User Rights: Right to know what data is collected and request its deletion.

    πŸ‡ΊπŸ‡Έ United States (State-Level Laws)

    VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado) & UCPA (Utah)

    These laws require businesses to conduct data protection assessments and provide clear notices about targeted advertising.

    • β€’Key Requirement: Opt-out for targeted ads and profiling.

    πŸ‡¨πŸ‡¦ Canada

    PIPEDA (Personal Information Protection and Electronic Documents Act)

    Canada's federal law emphasizes "Meaningful Consent." It requires that users understand exactly what they are agreeing to.

    • β€’Key Requirement: Consent must be obtained before or at the time of collection.
    • β€’User Rights: Right to challenge an organization's compliance.

    πŸ‡§πŸ‡· Brazil

    LGPD (Lei Geral de ProteΓ§Γ£o de Dados)

    Closely mirrored after the GDPR, the LGPD requires a legal basis for all data processing activities.

    • β€’Key Requirement: Clear identification of the "Data Protection Officer" (Encarregado).
    • β€’User Rights: Right to confirmation of the existence of data processing.

    🌍 Global Cookie Consent Laws

    Opt-In vs Opt-Out

    Simplified for your website's compliance.

    Opt-Out
    πŸ‡ΊπŸ‡Έ

    CCPA / CPRA (California)

    Opt-Out of Sale/Sharing. Data Access & Deletion Rights.

    πŸ›‘οΈ

    VCDPA, CTDPA (Virginia, Connecticut)

    Opt-Out for Targeted Ads. Universal US Signals.

    πŸ›‘οΈ

    CPA, UCPA (Colorado, Utah)

    Opt-Out for Targeted Ads. Universal Opt-Out Signals.

    Opt-In
    πŸ‡ͺπŸ‡Ί

    GDPR (EU & UK)

    Explicit Opt-In Consent. Right to be Forgotten & Withdraw.

    πŸ‡¨πŸ‡¦

    PIPEDA (Canada)

    Meaningful Consent. User Understanding is Key.

    πŸ‡§πŸ‡·

    LGPD (Brazil)

    Requires Explicit Consent & DPO. GDPR-like Framework.

    πŸ‡ΏπŸ‡¦

    POPIA (South Africa)

    Strict Necessity & Security for Data.

    πŸ‡¦πŸ‡ͺ

    PDPL (Saudi Arabia, UAE)

    Data Sovereignty. Local Storage Rules.

    🌍 Other Key Global Regulations

    A quick global reference.

    • POPIA (South Africa)

      Focuses on "Responsible Parties" and requires strict security for processed data.

    • nFADP (Switzerland)

      The revised Federal Act focuses on increased transparency and stricter penalties for breaches.

    • PDPL (Saudi Arabia / UAE)

      Emerging frameworks emphasizing data sovereignty and local processing rules.

    In Short: Every Major Model at a Glance

    RegulationRegionModelKey Focus
    GDPREuropeOpt-InExplicit consent & "Right to be Forgotten"
    CCPA/CPRAUSA (CA)Opt-Out"Do Not Sell" rights & data transparency
    PIPEDACanadaOpt-InPurpose-based consent & accountability
    LGPDBrazilOpt-In10 legal bases for processing data
    PDPLMiddle EastOpt-InData sovereignty & local storage rules
    POPIASouth AfricaOpt-InProtecting constitutional right to privacy

    Make your website compliant today.

    Join 1,000+ websites already using CookieLet to handle cookie consent the right way.