Solutions

Regulations

Every privacy law and industry framework GrantCookie supports, grouped by region, with the consent model the banner uses there. Each entry links to a guide on what the law asks of your website.

Opt-in Non-essential cookies wait until the visitor agrees.
Opt-out Cookies can run until the visitor opts out.
Notice The banner tells the visitor and records the choice.

The badges describe what the banner does in each market. They are not legal advice.

Europe

3 laws

ePrivacy Directive

Opt-in

Privacy and Electronic Communications Directive 2002/58/EC

European Union Adopted 2002, amended 2009; a 2025 proposal to change it is not yet law
GDPR

Opt-in

General Data Protection Regulation

European Union and United Kingdom Applies since May 2018
PECR

Opt-in

Privacy and Electronic Communications Regulations 2003

United Kingdom In force since 2003; cookie rule rewritten from February 2026

Canada

2 laws

PIPEDA

Opt-in for advertising

Personal Information Protection and Electronic Documents Act

Canada In force since 2001, fully since 2004
Law 25

Opt-in

Act to modernize legislative provisions as regards the protection of personal information

Quebec, Canada Phased in from 2022 to 2024

United States

7 laws

CCPA

Opt-out

California Consumer Privacy Act

California, USA In force since January 2020
CPRA

Opt-out

California Privacy Rights Act

California, USA In force since January 2023
CPA

Opt-out

Colorado Privacy Act

Colorado, USA In force since July 2023
CTDPA

Opt-out

Connecticut Data Privacy Act

Connecticut, USA In force since July 2023, with major amendments from July 2026
OCPA

Opt-out

Oregon Consumer Privacy Act

Oregon, USA In force since July 2024, with further obligations from January 2026
UCPA

Opt-out

Utah Consumer Privacy Act

Utah, USA In force since December 2023
VCDPA

Opt-out

Virginia Consumer Data Protection Act

Virginia, USA In force since January 2023

Latin America

1 law

LGPD

Opt-in

Lei Geral de Proteção de Dados Pessoais

Brazil In force since September 2020

Middle East and Africa

2 laws

PDPL (KSA)

Opt-in

Personal Data Protection Law

Saudi Arabia Fully enforceable since September 2024
POPIA

Opt-in

Protection of Personal Information Act

South Africa Fully enforceable since July 2021

Asia Pacific

4 laws

Privacy Act 1988

Notice

Australia’s federal privacy law

Australia In force since 1989, reform in progress
DPDP

Opt-in

Digital Personal Data Protection Act, 2023

India Enacted 2023; consent rules apply from May 2027
PDPA (Singapore)

Notice

Personal Data Protection Act 2012

Singapore In force since 2014, major update in 2021
PDPA (Thailand)

Opt-in

Personal Data Protection Act B.E. 2562 (2019)

Thailand Fully enforceable since June 2022

Frameworks

2 frameworks, on Growth and Scale plans

Google Consent Mode v2

Framework

EEA, UK and Switzerland Required for Google Ads in the EEA from March 2024
IAB TCF v2.3

Framework

Transparency & Consent Framework, version 2.3

European Union and United Kingdom Version 2.3 required from March 2026