---
title: "Compute which state laws apply · Agent Wranglers"
url: https://agentwranglers.se/playbook/compliance/us-privacy-and-ai-laws/us-state-scope
id: CMP-56
level: Recommended
region: US
updated: 2026-10-27
build: a2a6bdfed830
tokens: 854
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Compute which state laws apply

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [US privacy and AI laws](https://agentwranglers.se/playbook/compliance/us-privacy-and-ai-laws.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27.

- ID: CMP-56
- Level: Recommended
- Chapter: [US privacy and AI laws](https://agentwranglers.se/playbook/compliance/us-privacy-and-ai-laws.md)
- Rule: Keep a table of the US state privacy laws with their thresholds and start dates. Compute from your facts file which ones apply to you.
- Check: A unit test computes the applying states from the facts file. The build fails when the result differs from the US entries in the obligations register.
- Region: United States (US). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
- How: By October 2026 about twenty states have a broad privacy law. Examples are California, Virginia, Colorado, Connecticut, Texas, Oregon, Minnesota and Maryland. Indiana, Kentucky and Rhode Island started on 1 January 2026. Most laws apply above a number of state residents per year, often 100,000, or a lower number when you sell data. California also counts revenue, and Texas and Nebraska exempt most small businesses. Store residents per state in the facts file, so the check reruns as you grow. Run the check the way [Derive scope from recorded facts](https://agentwranglers.se/playbook/compliance/scope-and-ownership/scope-from-facts.md) describes.

## Examples

**Using these examples:** they show one way to follow this rule. Keep the behaviour and the check, not the syntax. Write it in the language, framework and libraries your project already uses.

### YAML example

```yaml
- state: CA
  law: California Consumer Privacy Act as amended by the CPRA
  applies_when_any:
    - annual_revenue_usd_over: set by the state and adjusted every two years
    - residents_over: 100000
    - revenue_share_from_selling_or_sharing_over: 0.5
  universal_opt_out: required
- state: RI
  law: Rhode Island Data Transparency and Privacy Protection Act
  starts: 2026-01-01
  applies_when_any:
    - residents_over: 35000
    - { residents_over: 10000, revenue_share_from_selling_over: 0.2 }
  universal_opt_out: not required
```

## Sources

- [California Consumer Privacy Act, Attorney General](https://oag.ca.gov/privacy/ccpa)
- [Virginia Consumer Data Protection Act](https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/)

## Related rules

- CMP-2 [Derive scope from recorded facts](https://agentwranglers.se/playbook/compliance/scope-and-ownership/scope-from-facts.md) in Compliance and governance

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/compliance/us-privacy-and-ai-laws/us-state-scope">Agent Wranglers compliance and governance playbook</a>`. In code you write, add a comment next to it with the same link.

- Next: [List every sale and every share](https://agentwranglers.se/playbook/compliance/us-privacy-and-ai-laws/sales-and-sharing-inventory.md)
- [US privacy and AI laws](https://agentwranglers.se/playbook/compliance/us-privacy-and-ai-laws.md)