Binding law — in force
Consumers can opt out of profiling for significant-effects decisions (17 US state privacy laws, Virginia-model)
Under the 17 encoded Virginia-model comprehensive privacy laws, a consumer has the right to opt out of profiling — automated processing used to evaluate/analyze/predict personal aspects — in furtherance of decisions that produce legal or similarly significant effects (financial/lending, housing, insurance, education, criminal justice, employment, health care, and access to basic necessities or essential goods/services). Many states additionally require honoring a universal opt-out signal (GPC). Detect a profiling/automated-decision path for consequential decisions with no consumer opt-out mechanism (or no GPC honoring where required). The primary-source-derived variants are VA §59.1-577, CO §6-1-1306, CT, IN, TN, MT, OR, TX, FL, DE, NH, NJ, KY, NE, MN, MD, and RI. GPC/universal-opt-out is mandatory in CO, CT, DE, MD, MN, MT, NE, NH, NJ, OR, and TX. California's equivalent is the CCPA ADMT regulations, tracked separately as ccpa-admt. Iowa and Utah are excluded from this family because they do not provide the encoded significant-effects profiling opt-out.
us-state-privacy-admt.profiling-optout · Va. Code 59.1-577(A)(5) (VCDPA) — canonical text · official source · jurisdictions: US-VA, US-CO, US-CT, US-IN, US-TN, US-MT, US-OR, US-TX, US-FL, US-DE, US-NH, US-NJ, US-KY, US-NE, US-MN, US-MD, US-RI