You can install extensions and updates via Composer
See Magento (and other software) versions we support and guarantee their compatibility with our extensions
- Opt-out from selling or sharing personal information US Privacy Settings in customers' account
- Deletion requests Approve or deny requests in bulk
- Opt-out from selling or sharing personal information US Privacy Settings in customers' account
- Deletion requests Approve or deny requests in bulk
2.4.6-p4; 2.4.5-p6; 2.4.4-p7
US Privacy Laws for Magento 2
Easily prepare your store to meet US laws' essential requirements using a single solution. California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA) privacy regulations are supported.
- Empower users to opt out of personal data sales or sharing
- Enable buyers to securely download their personal data
- Offer customers to request account deletion
- Create and manage Privacy Policy versions
- Collect various consents with custom checkboxes
2023 ー New Era Of US Privacy Laws
Following California's example, other US states are introducing their privacy laws, set to take effect in 2023. Are you doing business in these states?
CPRA
enforcement date (amends the CCPA) -
July 1, 2023
CPA
effective/enforcement date - July 1, 2023
CTDPA
effective/enforcement date - July 1, 2023
VCDPA
effective/enforcement date - January 1, 2023
UCPA
effective/enforcement date - December 31, 2023
(coming soon)
Adhere to users' rights as outlined by US Privacy Laws
While privacy laws have slight variations from state to state, it's important to note that these regulations share a common goal of protecting a similar set of core online consumer rights.
- right to delete
- right to opt-out
- right to portability
- right to access
- right to notice
Discover the benefits you can get
once install the solution:
☝
Safeguard your business
Avoid heavy fines and penalties, ensuring your bottom line remains secure while staying compliant with US laws
☝
Earn customer trust
Turn trust into a powerful competitive edge by demonstrating your commitment to privacy and security
☝
Stay calm and confident
Feel free to focus on the growth and success of your business, knowing that your compliance with US laws is in perfect order
Integrate the key requirements of US Privacy Laws
into your Magento 2 store
Opt-outs for personal data sales or sharing
Under US Privacy Laws, businesses must transparently disclose and provide clear opt-out instructions when selling or sharing personal data (“right to opt-out”).
Allow customers to simply reject the sale or sharing of their personal data with third parties. For this, customers need to choose the suitable option for the 'Don't Sell or Share My Personal Information' setting in their customer accounts.
View and filter customers by their consent on the Customers grid.
Account deletion option
Respect the “right to delete” specified in the new US privacy laws.
Enable registered customers to ask for account deletion. Store admins will see all sent requests in one place and can effectively approve or deny them in bulk.
It is also possible to configure automatic removal of personal data for inactive accounts after a certain deadline in days.
Secure downloading of personal data
Utilizing the extension, you can ensure also the “right to data portability” and “right to access”.
Users have the option to securely download their personal information for the past 12 months from your website in a CSV file. This process requires a password and is accessible only to the customer.
Consents collection via custom checkboxes
Since laws can differ between states and regions, the extension lets you include custom checkboxes.
This approach enables you to show wording that suits your legal needs. Add as many checkboxes as necessary and decide where to put them: Registration form, Checkout, Newsletter, or Contact Us form.
Management of Privacy Policy versions
Companies should establish an easily accessible and clear Privacy Policy, detailing data collection, its purpose, user rights, and more.
With the extension, you can generate and edit multiple Privacy and Cookie Policy versions. Additionally, it is possible to track and manage all Privacy Policy versions in one place from the admin panel.
Save time on manual operations
with additional consent management features
⚡ Configure a user-friendly notification system: send alerts to the manager's email to keep all requests under full control
⚡ Automatically dispatch email notifications to update customers on the status of their deletion requests
⚡ Set up an automated data erasure routine, ensuring retention of essential tax-related data for the necessary duration
⚡ Automatically ask for fresh permissions by displaying required checkboxes if there are changes in the active Privacy Policy version
⚡ Automatically update the included GeoIP database via the Amasty Service or opt for manual database refreshing
Be aware of the consequences of non-compliance
with the US Privacy Law requirements
Spoiler: They can be costly for your business
Sephora Case: Sephora, a French retailer, faced the penalty under the CCPA for not disclosing to customers about their personal data sales, resulting in a $1.2 million settlement.
FAQ
VCDPA (incl. privacy policy and sensitive data requirements) applies to for-profit businesses operating in Virginia or catering to Virginia residents, must meet either of these conditions annually: 1) handling personal data of 100,000 Virginia residents, or 2) earning 50% of revenue from personal data sales and managing data of 25,000 Virginia residents.
CPA requirements (Colorado) apply to any entity operating in Colorado or serving its residents is subject to these criteria: 1)annually handling personal data of 100,000+ Colorado residents, or 2) gaining revenue/discounts from personal data sales and controlling/processing data of 25,000+ Colorado residents.
Utah consumer privacy law (legislation) is set to take effect on December 31, 2023. Enforcement starts on this date, while the 30-day notice and cure provision remains indefinitely active. Failing to rectify the violation within the cure period may result in fines of up to $7,500 per breach for businesses.
The effective date of СTDPA text is July 1, 2023. Enforcement starts on the same date, 30- day notice and cure provision will remain in effect until December 31, 2024. Businesses that violate this legislation can experience fines of up to $5000 per willful violation.
4.4 
See 500+ verified reviews
Login and Registration Form