Evaluation Statutes

All privacy laws are based on statutes enacted into law or administrative rules promulgated by agency regulations. Each privacy evaluation question is associated with one or more privacy laws. As such, we can calculate scores for each statute or regulation using only those questions associated with the statute or regulation. This type of statute score calculation is similar to our evaluation scores. Each specific statute or regulation's score serves as an indirect proxy indicating the likelihood of the application or service satisfying all of its compliance obligations for a particular privacy law. In addition, all these privacy evaluation questions are used in our full evaluation process. Applications and services that receive a full evaluation are included in our 2021 State of Kids' Privacy Report. The following state, federal, and International privacy-related statutes and regulations are associated with privacy evaluation questions and used to generate that particular law's score:

  • California Online Privacy Protection Act (CalOPPA)

  • California "Shine the Light" (ShineTheLight)

  • California Consumer Privacy Act (CCPA)

  • California Data Breach Notification Requirements (DataBreach)

  • California Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA)

  • California AB 1584 - Privacy of Pupil Records (AB 1584)

  • California Privacy of Pupil Records (CalPPR)

  • California Privacy Rights for Minors in the Digital World (CalPRMDW)

  • California Electronic Commerce Act (CalECA)

  • California Electronic Communications Privacy Act (CalECPA)

  • Student Online Personal Information Protection Act (SOPIPA)

  • Early Learning Personal Information Protection Act (ELPIPA)

  • Children's Online Privacy Protection Act (COPPA)

  • Family Educational Rights and Privacy Act (FERPA)

  • Children's Internet Protection Act (CIPA)

  • Digital Millennium Copyright Act (DMCA)

  • Copyright Act of 1976 (Copyright Act)

  • Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (CAN-SPAM)

  • The Communications Decency Act of 1996 (CDA)

  • Protection of Pupil Rights Act (PPRA)

  • The National School Lunch Act (NSLA)

  • General Data Protection Regulation (GDPR)

Click to download the Evaluation Statute questions.