Regulations and standards
Laws and rules that affect a site with ads
Each privacy law and each consent signal explained in plain language: who it applies to, what it requires, what is and is not allowed, and how it shows up in monetization with Google.
GDPRGDPR (European Union)The GDPR explained for owners of sites with AdSense and Ad Manager: who it applies to, valid consent, cookies, fines and what Google requires.Europe and United KingdomRead the guide →UK GDPRUK GDPR (United Kingdom)The UK GDPR, the Data Protection Act 2018, PECR and the cookie changes in the Data (Use and Access) Act 2025, explained for people who monetize with ads.Europe and United KingdomRead the guide →FADPFADP (Switzerland)The new Swiss data protection law (nFADP), the cookie rules, the fines on individuals and the CMP Google requires, explained for people who monetize.Europe and United KingdomRead the guide →DMADMA (European Union)The EU Digital Markets Act explained for publishers and advertisers: why Google started requiring Consent Mode v2 signals in 2024.Europe and United KingdomRead the guide →LGPDLGPD (Brazil)The LGPD explained for Brazilian publishers: legal bases, cookies according to the ANPD guide, rights, the data protection officer, penalties and what changes in AdSense.South AmericaRead the guide →PIPEDAPIPEDA (Canada)Canada's federal privacy law explained for publishers: meaningful consent, behavioral advertising, rights and enforcement.CanadaRead the guide →Law 25Law 25 (Quebec)Quebec's Law 25 explained for publishers: the 2022 to 2024 phases, tracking technologies, consent, rights and penalties of up to 10 million dollars.CanadaRead the guide →POPIAPOPIA (South Africa)What POPIA requires of anyone who processes South Africans' data: lawful processing conditions, rights, direct marketing, fines and what changes for sites with AdSense.AfricaRead the guide →APPsPrivacy Act (Australia)The Privacy Act 1988, the 13 Australian Privacy Principles, the 2024 reform, the children's code and the fines, explained for people who monetize.Asia-PacificRead the guide →PIPLPIPL (China)What China's PIPL requires of sites with Chinese visitors: consent, separate consent, rights, international transfers and fines.Asia-PacificRead the guide →USUS privacy lawsAn overview of US privacy laws for publishers: no general federal law, the states' opt-out model, CCPA, GPC, GPP and Google's RDP.United States (federal)Read the guide →COPPACOPPA (US)COPPA and the FTC's 2025 rules explained for people who monetize: parental consent, mixed audiences, fines and age flagging in AdSense and Ad Manager.United States (federal)Read the guide →CCPACCPA and CPRA (California)Guide to the CCPA as amended by the CPRA: who must comply, sale and sharing for ads, opt-out link, mandatory GPC, fines and 2026 rules.United States (states)Read the guide →VCDPAVCDPA (Virginia)Guide to Virginia's VCDPA: who must comply, targeted advertising, opt-out, sensitive data, assessments, the 30-day cure period and fines.United States (states)Read the guide →CPACPA (Colorado)Guide to the Colorado Privacy Act: who must comply, targeted advertising opt-out, GPC required since July 2024, rules and fines.United States (states)Read the guide →CTDPACTDPA (Connecticut)Guide to Connecticut's CTDPA: new 2026 thresholds, targeted advertising opt-out, required GPC, rules for minors, privacy notice and fines.United States (states)Read the guide →UCPAUCPA (Utah)Guide to Utah's UCPA: revenue threshold, targeted advertising opt-out, sensitive data, right to correct since 2026, the 30-day period and fines.United States (states)Read the guide →TDPSATDPSA (Texas)Guide to Texas's TDPSA: the small business rule, targeted ads opt-out, browser opt-out since 2025, mandatory notices and fines.United States (states)Read the guide →OCPAOCPA (Oregon)Guide to Oregon's OCPA: who must comply, list of third parties, universal opt-out since 2026, rules for under-16s and fines.United States (states)Read the guide →TIPATIPA (Tennessee)Guide to the TIPA, Tennessee's privacy law in force since July 2025: who must comply, rights, opt-out, the NIST defense and Google ads.United States (states)Read the guide →FDBRFDBR (Florida)Guide to the Florida Digital Bill of Rights, in force since July 2024: the narrow scope, the rights, the sensitive data rule and what changes in Google ads.United States (states)Read the guide →DPDPADPDPA (Delaware)Guide to the Delaware Personal Data Privacy Act: low threshold of 35,000 consumers, nonprofits, GPC required since 2026 and the 2027 changes.United States (states)Read the guide →ICDPAICDPA (Iowa)Guide to the Iowa Consumer Data Protection Act, in force since January 2025: thresholds, leaner rights, targeted ads opt-out and what changes in Google.United States (states)Read the guide →MTCDPAMTCDPA (Montana)Guide to the Montana Consumer Data Privacy Act: thresholds lowered in 2025, end of the cure period, GPC required, rules for minors and Google ads.United States (states)Read the guide →NDPANDPA (Nebraska)Guide to the Nebraska Data Privacy Act, in force since January 2025: no revenue or volume threshold, the small business rule, browser opt-out and Google.United States (states)Read the guide →NJDPANJDPA (New Jersey)Guide to New Jersey's privacy law, in force since January 2025: thresholds, sensitive financial data, required GPC, fines and the status of the regulations.United States (states)Read the guide →MCDPAMCDPA (Minnesota)Guide to the Minnesota Consumer Data Privacy Act, in force since July 2025: right to question profiling, data inventory, required GPC and Google ads.United States (states)Read the guide →MODPAMODPA (Maryland)Guide to the Maryland Online Data Privacy Act: strict minimization, ban on selling sensitive data, rules for under-18s, required GPC and Google ads.United States (states)Read the guide →TCFIAB TCFWhat the IAB Europe TCF is, how the TC string works, what changed in versions 2.3 and 2.4 and why Google requires a certified CMP in Europe.Market signals and standardsRead the guide →GPPGPPWhat the IAB Tech Lab GPP is, how the GPP string and the US sections work and when a site with AdSense or Ad Manager needs it.Market signals and standardsRead the guide →GPCGPCWhat the Global Privacy Control is, which US states require honoring the signal, how the site should respond and how to test in the browser.Market signals and standardsRead the guide →Consent Mode v2Google Consent Mode v2What Google Consent Mode v2 is, the 4 signals, basic and advanced mode, deadlines and how to set it up.Market signals and standardsRead the guide →UETMicrosoft UET Consent ModeHow the Consent Mode of the Microsoft Advertising UET tag works, the ad_storage signal, the requirement in the EEA, United Kingdom and Switzerland and the alternative through the TCF.Market signals and standardsRead the guide →ClarityMicrosoft Clarity Consent ModeHow Microsoft Clarity has required a consent signal in the EEA, United Kingdom and Switzerland since October 2025 and how to send it with a CMP, Consent Mode or the consentv2 API.Market signals and standardsRead the guide →AmazonAmazon Consent SignalWhat the Amazon Consent Signal is, when Amazon Ads requires a consent signal for EEA and United Kingdom data and how it coexists with the TCF and the GPP.Market signals and standardsRead the guide →PoliciesGoogle publisher policiesGoogle's policies and restrictions for AdSense, Ad Manager and AdMob explained with examples: content, ad placement, inventory value and review.GoogleRead the guide →Better AdsBetter Ads StandardsThe 23 ad experiences audiences reject the most, with animated examples of what is and is not allowed.GoogleRead the guide →
No regulations in this region.