# US Cookie Consent: State Privacy Laws & Opt-Out Banners

> Serve state-specific cookie consent across the US with CPRA opt-outs, Global Privacy Control, targeted-ad and sale opt-outs, and audit-ready logs.

Canonical page: https://cookiechimp.com/usa

> This page describes how CookieChimp is configured for US visitors. It is not legal
> advice.

## A different banner for every state that needs one

The US has no single federal cookie law. Create a customisable banner for each US state
with a privacy law, then apply the opt-out model — and the universal-opt-out signals —
that state expects.

### California — CPRA / CCPA (opt-out)

California treats most cross-context behavioural advertising as a "sale" or "share."
Offer a clear opt-out and honour Global Privacy Control as a valid opt-out signal.
Key settings: honour GPC, opt out of sale/share, sensitive-data limits.

### Universal opt-out states — GPC / UOOM required (opt-out)

Colorado, Connecticut, Texas, Oregon, Montana, Minnesota, New Jersey, Maryland,
Delaware, Nebraska and New Hampshire require recognition of a universal opt-out
mechanism such as Global Privacy Control, plus a clear way to opt out of targeted
advertising and the sale of personal data. Key settings: auto-honour GPC, opt out of
targeted ads, preference centre.

### Opt-out states — no UOOM mandate

Virginia, Utah, Tennessee, Iowa, Indiana, Kentucky, Rhode Island and Florida follow an
opt-out model but don't mandate honouring universal signals. Provide a clear opt-out of
targeted advertising and sale through the banner or preference centre.

## How it works

1. Detect the state.
2. Honour opt-out signals.
3. Offer a clear opt-out.
4. Log and prove choices.

## What CookieChimp provides

- **State geo-targeting** — target individual US states and route each visitor to the
  banner set for their state.
- **GPC honouring** — treat Global Privacy Control as a valid opt-out where states
  require it, via the GPC integration.
- **Opt-out controls** — offer clear opt-outs of sale, sharing and targeted advertising
  through the banner.
- **Sensitive-data limits** — apply stricter handling to sensitive categories, and
  opt-in where the law requires it.
- **COPPA-aware** — use an opt-in flow and disable personalised ads in child-directed
  contexts (under 13).
- **Audit-ready records** — export consent and opt-out choices, consent type, country
  and region as CSV.
- **Signals to your stack** — forward choices to Google Consent Mode, Meta and
  Microsoft.
- **Persistent choices** — let visitors revisit and change their opt-out at any time.

## FAQ

**Is there a single US cookie law?**
No. There is no comprehensive federal privacy law for cookies. Instead there's a
patchwork of state laws — led by California's CPRA — plus federal rules for specific
sectors like health (HIPAA) and children (COPPA). Most state requirements follow an
opt-out model.

**How does CookieChimp target individual states?**
Create a banner and target it at specific US states. CookieChimp geolocates each
visitor, resolves their state, and serves the banner set for it — with a US-wide banner
as a fallback for anyone whose state can't be detected.

**Do I have to honour Global Privacy Control?**
A growing number of states — including California, Colorado, Connecticut, Texas and
Oregon — require recognition of a universal opt-out mechanism such as GPC. With
CookieChimp's GPC integration enabled, a visitor's opt-out signal is treated as a valid
opt-out automatically.

**What is a "Do Not Sell or Share" requirement?**
California and several other states treat cross-context behavioural advertising as a
"sale" or "share" and require a clear way to opt out.

**What about health or children's data?**
Sector rules add stricter requirements: HIPAA covers protected health information and
COPPA covers children under 13. In child-directed or health contexts, use an opt-in
banner, disable personalised advertising and minimise third-party trackers.

**Which states actually have privacy laws right now?**
Around twenty states have passed comprehensive laws so far, and more take effect each
year. CookieChimp supports a baseline US banner everywhere plus state-specific opt-out
banners as new laws come into force.

## Related pages

- Full page: https://cookiechimp.com/usa
- Maryland Online Data Privacy Act: https://cookiechimp.com/maryland-online-data-privacy-act.md
- Canada: https://cookiechimp.com/canada.md
- Index of all markdown pages: https://cookiechimp.com/llms.txt