Comprehensive Privacy Law Coverage
The modes we ship. You still choose which rule to follow.
GDPR (EU)
Opt-in mode for EU-style cookie consent. Not a legal certification.
Canadian Laws
Canada mode for a PIPEDA-style notice. French, and an optional Quebec opt-in on Pro.
CCPA (California)
Opt-out copy for California. A banner is not an opt-out of sale.
Which Canadian Privacy Laws Are Covered?
What the Canada mode does, and what it does not:
PIPEDA (Personal Information Protection and Electronic Documents Act)
PIPEDA is Canada's federal privacy law that applies to private-sector organizations. Our banner meets PIPEDA requirements by:
- Obtaining meaningful consent before collecting personal information through cookies
- Providing clear information about data collection purposes
- Allowing users to withdraw consent at any time
- Blocking tracking cookies until users consent
Learn more about PIPEDA compliance requirements.
CASL is not this product
CASL is Canada's anti-spam law. A narrow software-install rule exists, and it is not the same as a cookie banner. This product does not send email. Scripts you add can stay off until opt-in. That is not CASL compliance.
- Blocking tracking scripts until users provide consent
- Clearly identifying the organization
- Providing an easy way to opt-out
Quebec Law 25 (Bill 64)
Quebec Law 25 is stricter than PIPEDA for tracking technologies. The banner can do this:
- Explicit consent requirements (not implied consent)
- Opt-in behavior (not opt-out)
- Full bilingual support (English and French)
- Granular consent controls
- Easy consent withdrawal
Quebec Law 25 has been fully in force since September 2024. Administrative penalties can reach $10 million or 2% of worldwide turnover. Penal fines can reach $25 million or 4%, whichever is greater. A banner can collect opt-in consent and offer French. It does not appoint your privacy officer, complete a privacy impact assessment, or write your privacy policy.
Alberta PIPA (Personal Information Protection Act)
Alberta has its own private-sector privacy statute. This product has no Alberta mode. Canada mode is a PIPEDA-style notice, not a provincial compliance program.
BC PIPA (British Columbia Personal Information Protection Act)
British Columbia has its own private-sector privacy statute. There is no BC mode. The banner does not do any of the following for you:
- Requiring consent for personal information collection
- Ensuring transparency in data handling
- Providing mechanisms for individuals to control their data
What About International Privacy Laws?
Our cookie banner also provides robust support for international privacy regulations:
GDPR (General Data Protection Regulation)
The GDPR is the benchmark for data protection in the European Union. Our banner ensures GDPR compliance by:
- Requiring explicit opt-in consent for non-essential cookies
- Providing granular control over cookie categories
- Logging all consent decisions for audit trails
- Allowing users to easily withdraw consent
- Ensuring data minimization and purpose limitation
Learn more about GDPR compliance requirements.
CCPA (California Consumer Privacy Act)
The CCPA is California's privacy law, which focuses on consumer rights regarding personal information. Our banner supports CCPA by:
- Providing an opt-out mechanism for the "sale" of personal information
- Offering granular control over data sharing
- Ensuring transparency about data collection practices
- Allowing users to request access to or deletion of their personal information
How Does One Banner Cover Multiple Laws?
Our intelligent cookie banner automatically detects the geographic location of your website visitors. Based on their location, it dynamically applies the specific privacy law requirements relevant to that region.
- EU Visitors: Opt-in before non-essential cookies, with granular controls. EU law did not adopt the UK's 2026 statistics exception.
- UK Visitors: Advertising and cross-site tracking still need prior consent under PECR. Since 5 February 2026, cookies used only for that site's statistics, and cookies that only adapt appearance, can run with a simple, free opt-out. An opt-in banner is still valid.
- Canadian Visitors: PIPEDA still applies. The federal replacement bill introduced in June 2026 is not in force. Meaningful consent, with implied consent only where the information is not sensitive and the notice is clear.
- Quebec Visitors: Law 25 opt-in before non-essential identification or profiling technologies, with English and French available.
- California Visitors: Opt-out of sale and sharing, including a way to honour Global Privacy Control. A banner by itself is not the opt-out of sale.
You install one snippet. You still choose the mode. Pro geo-rules only apply the override you configured.
Ready to Build a banner?
Use the modes that match the visitors you actually have.
- ✓ Optional geo rules on Pro, for countries you select
- ✓ You pick Canada, the EU, California, or custom
- ✓ Not CASL, and not a Google-certified CMP
- ✓ One snippet, about 28 KB gzipped
Conclusion / TL;DR
Key Takeaways:
- Comprehensive Coverage: Modes for Canada, the EU, and California. French is included. Pro can add a Quebec override.
- Automatic Geo-Detection: Location detection does not choose the statute. You set the mode.
- Simplified Compliance: One banner for the modes we ship. It does not replace a privacy program.
- Future-Proof: Annual plans get features shipped later. The banner does not rewrite itself when a statute changes.
Next Steps:
- Create a banner in the builder
- Customize the design to match your brand
- Install the code on your website
- Check that the scripts you added stay off until consent
Frequently Asked Questions
What privacy laws does this cookie banner cover?
The builder has modes for Canada, the EU, and California, plus custom copy. Pro can show a different mode to visitors from a country you pick. It does not detect Alberta PIPA or BC PIPA, and CASL is not a mode.
Does this work for Canadian privacy laws?
Canada mode is written for a PIPEDA-style notice. French is available, and Pro can force opt-in for visitors in Quebec. There is no Alberta PIPA mode, no BC PIPA mode, and no CASL email feature.
Is this GDPR compliant?
EU mode can wait for opt-in and offer category choices. Consent logs are on Pro Annual, not on the free plan. The banner does not make a site GDPR compliant.
How does one banner cover multiple privacy laws?
You pick the default mode. On Pro, a geo rule can override that mode for a country or region you select, such as Quebec. Location detection does not choose the law for you.
What about future privacy laws?
The banner does not update itself when a statute changes. Annual subscribers get features we ship later. One-time Pro keeps the feature set from the day you bought it, plus security patches.
How do I know which laws apply to my website?
If you have visitors in the EU, the UK, Canada, Quebec, or California, read the rule that applies to that visit and set the banner to match. The product will not decide that for you.
Does this cover CCPA (California)?
California mode uses opt-out copy. It does not file anything with a regulator, and a banner alone is not an opt-out of sale.
What if I only have Canadian visitors?
A Canadian site can use Canada mode, and Pro can add a Quebec override. That is not automatic compliance with every provincial statute.