Extract to table
Pull the structured facts out of a document: parties, dates, amounts, obligations.
Extract to table / multi-state-privacy-law-applicability-matrix.xlsx
multi-state-privacy-law-applicability-matrix.xlsx
Parties
Cascade Retail Holdings Inc
Harkness LLP
Cascade Digital Marketplace LLC
Peakview Analytics Inc
Fieldhaven Consulting Group LLC
Ridgeline Fulfillment Services Inc
Cascade Rewards Corp
Varies Financial Inc
Dates
June 30, 2025
May 19, 2025
August 15, 2025
2020-01-01
2023-01-01
2023-07-01
January 1, 2025
December 31, 2024
2023-12-31
2025-01-01
Amounts
$3.87
$25
$18.4
$2,500
$7,500
$20,000
$5,000
$15,000
$25,000
$10,000
Obligations
| Yes | Service provider and contractor agreements must include: limitations on use/retention/disclosure; compliance assistance; sub-processor requirements; certification of understanding
| Yes | Yes | Yes | Yes | Yes | Yes | Yes | No (VCDPA does not include right to limit sensitive PI; uses opt-in consent model) | Yes | Appeal process required — consumers must be able to appeal a refusal to act on a rights request; controller must respond within 60 days of appeal
| Yes | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes | Appeal right required; must provide mechanism and respond within 45 days
| No | Required | Must recognize universal opt-out mechanisms including GPC per CPA rules
| Yes | Yes | Yes | Yes | Yes | Yes | Yes | No (opt-in model for sensitive PI) | Yes | Appeal right required; must inform consumers of appeal mechanism and respond within 60 days
| No | Required (effective January 1, 2025) | Must recognize universal opt-out mechanisms; Cascade not currently honoring GPC — gap