Do state privacy laws apply to my small business?

Often not yet — most state privacy laws set thresholds (based on how many residents' data you process or your revenue) that many small businesses don't meet. But the list of states with comprehensive laws grows every year, thresholds vary by state, and some laws reach smaller businesses than owners expect.

Exempt today isn't a strategy. The laws of this generation share an architecture — notice, consumer rights, opt-outs, vendor obligations — so building the basics once covers you as new states switch on: an accurate privacy policy, a way to honor access and deletion requests, and knowing what data you actually collect and share.

The overlap with marketing is direct: consent-aware, first-party tracking is both the compliance posture and the measurement stack that keeps working as rules tighten. One build, two problems solved.