Stratgik — technology strategy and business systems engineering.
Delivery across the USA, UK, UAE and India.
US state privacy lawsAbout 20 states with comprehensive laws in 2026
There is no single US privacy law. California’s new rules on risk assessments, cybersecurity audits and automated decision-making took effect in January 2026, and roughly 20 states now have comprehensive privacy laws. We work out which apply to you and build opt-outs, rights requests and assessments into your systems.
What is at stake
Enforcement is active: regulators have focused on opt-out links, Global Privacy Control signals, dark patterns and data broker obligations.
CCPA administrative fines and civil penalties, higher for intentional violations and minors’ data
State attorneys general in other states enforce their own laws and can seek penalties
Californians can sue over data breaches caused by unreasonable security
What the law asks, in plain words
Each state sets thresholds by revenue, number of consumers or revenue from selling data. Map where you cross them.
State-specific disclosures on categories collected, purposes, sale or sharing and retention.
Honour opt-outs of sale, sharing and targeted advertising, including browser signals where required.
Access, deletion, correction and portability, typically answered within 45 days with verification.
Many states require opt-in consent for sensitive data such as health, precise location and children’s data.
Data protection assessments for high-risk processing, now with detailed California requirements.
New California rules cover notices, opt-outs and access for significant automated decisions.
Contracts that restrict how vendors use the data you share with them.
Free self-check
Ten questions, two minutes. Nothing is sent anywhere unless you ask for help.
How we get you compliant
Discover
Website, apps, CRM, ERP, spreadsheets, messaging tools and vendors.
Decide
Each gap scored against enforcement exposure and effort, so the serious ones get fixed first.
Implement
Notices, consent, request workflows, access controls, retention and vendor terms.
Hand over
A live session for the staff who handle data and a practice run of breach reporting.
Pricing
For organisations with one website or product and up to five systems holding personal data. Larger scope is quoted in writing before you pay anything.
Know which state laws apply and where you fall short.
$1,900one-time
Report in 7 working days
Choose Readiness AuditRecommended
We implement opt-outs, requests and assessments.
$5,900one-time
Typically 3 to 5 weeks
Choose Compliance SetupKeep up as new state laws take effect.
$790per month
Cancel any month
Choose Privacy CareA clear line: Stratgik is a technology firm, not a law firm. We implement and operate compliance in your systems. Where you need a legal opinion, we work alongside your lawyer.
Free readiness call
An engineer replies within one working day with a suggested approach and a fixed quote.
Questions
Not a comprehensive one. Sector laws such as HIPAA, GLBA and COPPA apply to specific data, and around 20 states have their own comprehensive consumer privacy laws.
Yes, if you do business with California residents and meet one of its thresholds, such as annual gross revenue above about US$26 million (adjusted for inflation) or buying, selling or sharing the data of 100,000 or more consumers or households.
Regulations on risk assessments, cybersecurity audits and automated decision-making technology took effect on 1 January 2026, with compliance deadlines phased over the following years.
A browser signal that tells websites a user wants to opt out of the sale or sharing of their data. California and several other states require businesses to honour it.
No. Stratgik is a technology firm. We implement notices, opt-outs, requests and assessments in your systems and work alongside your counsel for legal opinions.
Yes, for businesses with one website or product and up to five systems holding personal data. Larger scope is quoted in writing before work starts.
A readiness audit takes 7 working days and gives you a ranked, costed plan.
The Stratgik model
Four stages, in order. Most businesses need them one at a time.
