Follow-through kit
For a letter you already sent from the Act page: what to send next, and when.
Open the kit with the pass saved in this browser
What the kit contains
- The clock. The day your state's privacy law says the company must answer by, counted from the day you sent the letter, with the day count quoted from the statute row on file and its section.
- A follow-up letter for when no answer has come, citing the law, the date you sent your request and the date the answer was due.
- An appeal letter for when the company refuses or does nothing, citing your state's appeal section.
- Where to complain: the office that enforces the law, from the statute row.
- A calendar file with the due date, and the latest date if the company extends the time.
An arbitration opt-out has no statutory response clock, so for that letter the kit is the follow-up letter only.
Where it works
The kit uses the privacy law of the state you live in, and that law covers only some companies. Check the row for your state before you pay: a company below the threshold, or exempt, does not have to answer under it, though the follow-up letter still asks.
| State | Law | Who it covers | Not covered |
|---|---|---|---|
| Maryland | MODPA | Applies to persons conducting business in Maryland or targeting MD residents AND during the preceding calendar year: (a) controlled/processed PD of at least 35,000 MD consumers (excluding solely-payment-transaction data); OR (b) controlled/processed PD of at least 10,000 MD consumers AND derived more than 20% of gross revenue from sale of PD. MODPA is the strictest comprehensive state privacy law in the US — a multi-state program built to MODPA + CA exceeds all other state requirements.(Md. Code Com. Law § 14-4602) |
|
| Virginia | VCDPA | Applies to persons that conduct business in Virginia or produce products or services targeted to Virginia residents AND, during a calendar year, control or process PD of: (a) at least 100,000 consumers; OR (b) at least 25,000 consumers AND derive over 50% of gross revenue from the sale of PD.(Va. Code § 59.1-576) |
|
| District of Columbia | None on file | No comprehensive privacy statute is on file for the District of Columbia, so a DC resident gets only the follow-up letter: no clock, no appeal letter and no calendar dates. If you live in DC, you should not pay for this kit. | |
- Clock and both letters: Maryland, Virginia, Colorado, Connecticut, Texas, Oregon.
- Clock and the follow-up letter, no appeal letter: California. The rows on file for these states have no appeal section.
- Follow-up letter only: New Jersey, Minnesota, Utah, Delaware, Florida, Iowa, Indiana, Kentucky, Montana, Nebraska, New Hampshire, Rhode Island, Tennessee. The rows on file for these states give no response deadline for an access or deletion request, or no rows are on file, so there is no clock and no appeal letter. If you live in one of them, you should not pay for that.
- District of Columbia: follow-up letter only; see the table above.
A Do Not Sell letter has no response deadline in the rows on file for any state, so that choice gets the follow-up letter only.
Price
$1, once, paid on Stripe's own page. A pass lasts a year and is kept in a link and in this browser; there is no account. Ask and we refund. Write to corrections@termsunconditional.com.
The letter you wrote, every company page and every source stay free.
The kit is not for sale right now.