The triggering analysis
Which processing activities in your deployment engage that state's assessment requirement, and the provision that says so.
Dynamic PRA™ · US state privacy assessments
Priced per state, because the duty is per state.
A dozen states now require a documented assessment before certain processing. They do not agree on what triggers one, what it must contain, or how long you keep it. A single national assessment satisfies none of them precisely.
Basis
State privacy statutes
Scope
Per declared state
Price
$899 per state
Why not one document for all of them
Because the differences are exactly where the exposure is.
The states converge on the idea of an assessment and diverge on nearly everything that determines whether yours counts. Averaging them produces a document that is plausible everywhere and correct nowhere.
01
The trigger differs
What kinds of processing require an assessment is not uniform — targeted advertising, sale of personal data, profiling with legal or similarly significant effects and sensitive-data processing appear in different combinations.
02
The contents differ
What has to be weighed, and against what, varies. Some statutes name the balancing test explicitly; others describe the factors and leave the framing open.
03
Retention and production differ
How long the assessment must be kept, and the circumstances in which an attorney general can demand it, are not the same statute to statute.
04
Confidentiality treatment differs
Whether producing an assessment waives privilege, and what protection attaches when it is disclosed to a regulator, is a state-level question with real consequences.
We bring the regulatory intelligence and the intake. You bring the privacy and legal judgment for your use case and organization. The document is built to hold both.
The division of labour, stated onceWhat arrives per state
The duty map, cited. Not a national summary with the state name inserted.
Each state you declare produces its own assessment scaffold, built from the provisions that state actually enacted.
The required contents
Structured to that statute's expectations, so the section headings match what a regulator in that state would look for.
Retention and production
How long to keep it and under what conditions it may be demanded, expressed in days rather than in adjectives.
What this is not. LegisGate produces regulatory intelligence and assessment-preparation materials. Nothing we produce is legal advice, a legal opinion, a certification, or a determination of compliance, and no document we deliver satisfies a legal obligation on its own. Sufficiency is determined by your counsel. Sufficiency under any particular state statute is your counsel's judgement, not a property of the document we deliver.
Scope control
Buy the states you actually touch.
Obligations attach by where the person is. If your deployment reaches residents of four states, that is four assessments — and if it reaches residents of one, buying twelve is money spent on documents nobody will ask for.
The determination establishes the real footprint first, which is the only honest way to size this purchase.
Twelve statutes, one deployment
Find the real footprint before you buy the documents.
A determination costs a fraction of one assessment and tells you exactly how many you need. Its full price comes off whichever ones you buy.