Finding the Delta: Understanding the Differences in How State Privacy Laws Define Corporate Affiliates

All modern privacy statutes regulate when personal information can be shared with third parties, whether those third parties are service providers, vendors, contractors, or business partners. Most modern privacy statutes recognize, however, that privacy risks are reduced when the third party is related to the organization from which the data originates. As the following chart indicates, the statutes differ in terms of how they define corporate affiliates, with some statutes focusing solely on ownership structure while other statutes consider the use of common branding.

Click on the chart to view larger.

[1] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[2] Va. Code § 59.1-575 (2021).

[3] Utah Code Ann. 13-61-101(2) (2022).

[4] Conn. Sub. Bill No. 6, § 1(1) (enacted by legislature on April 28, 2022).

[5] Montana S.B. 384, § 2(1) (2023).

[6] Iowa Code § 715D.1(1) (2023).

[7] Tenn. Code Ann. 47-18-3201(1) (2023).

[8] Indiana Senate Act No. 5, Chp. 2, § 1(a) (2023).

[9] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[10] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[11] C.R.S. § 6-1-1303(1) (2021).

[12] Va. Code § 59.1-575 (2021).

[13] C.R.S. § 6-1-1303(1) (2021).

[14] Utah Code Ann. 13-61-101(2) (2022).

[15] Conn. Sub. Bill No. 6, § 1(1) (enacted by legislature on April 28, 2022).

[16] Montana S.B. 384, § 2(1) (2023).

[17] Iowa Code § 715D.1(1) (2023).

[18] Tenn. Code Ann. 47-18-3201(1) (2023).

[19] Indiana Senate Act No. 5, Chp. 2, § 1(a) (2023).

[20] C.R.S. § 6-1-1303(1) (2021).

[21] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[22] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[23] Va. Code § 59.1-575 (2021).

[24] C.R.S. § 6-1-1303(1) (2021).

[25] Utah Code Ann. 13-61-101(11) (2022).

[26] Conn. Sub. Bill No. 6, § 1(1) (enacted by legislature on April 28, 2022).

[27] Montana S.B. 384, § 2(1), (7) (2023).

[28] Iowa Code § 715D.1(1)(a) (2023).

[29] Tenn. Code Ann. 47-18-3201(1)(A) (2023).

[30] Indiana Senate Act No. 5, Chp. 2, § 1(b)(1) (2023).

[31] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[32] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[33] Va. Code § 59.1-575 (2021).

[34] C.R.S. § 6-1-1303(1) (2021).

[35] Utah Code Ann. 13-61-101(11) (2022).

[36] Conn. Sub. Bill No. 6, § 1(1) (enacted by legislature on April 28, 2022).

[37] Montana S.B. 384, § 2(1), (7) (2023).

[38] Iowa Code § 715D.1(1)(b) (2023).

[39] Tenn. Code Ann. 47-18-3201(1)(B) (2023).

[40] Indiana Senate Act No. 5, Chp. 2, § 1(b)(2) (2023).

[41] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[42] Cal. Civ. Code § 1798.140(d)(2) (West 2021).

[43] Va. Code § 59.1-575 (2021).

[44] C.R.S. § 6-1-1303(1) (2021).

[45] Utah Code Ann. 13-61-101(11) (2022)."

[46] Conn. Sub. Bill No. 6, § 1(1) (enacted by legislature on April 28, 2022).

[47] Montana S.B. 384, § 2(1), (7) (2023).

[48] Iowa Code § 715D.1(1)(c) (2023).

[49] Tenn. Code Ann. 47-18-3201(1)(C) (2023).

[50] Indiana Senate Act No. 5, Chp. 2, § 1(b)(3) (2023).