Obligation guides

State privacy assessment requirements

State privacy assessments are work products for heightened-risk processing. They are not one national template, and they do not replace a GDPR DPIA when Europe is also in scope.

Run the AI Regulatory Requirements Check →Obligation Atlas →

What these assessments are for

They document the processing, the risks to consumers, and the safeguards — under the statute that creates the duty. Colorado, Virginia, Connecticut, Texas, California’s ADMT risk assessment pathway, and peer states each have their own shape.

The free check names which state assessments are likely required or may apply. Compass cites the provisions and fills the regulatory half of the Dynamic Assessment scaffolds.

Honest uncertainty

Entity-level versus data-level exemptions, controller thresholds, and near-boundary volume bands should stay named as unknowns. Guessing those on ten questions is how free tools lose trust.

← Obligation Atlas · Start the free check