--------------------------- Title: Multi-State Privacy Law (MSPL): One Setup for All Your U.S. Visitors URL: https://www.cookiebot.com/us/multi-state-privacy-law-mspl/ --------------------------- # Multi-State Privacy Law (MSPL): One Setup for All Your U.S. Visitors The Multi-State Privacy Law (MSPL) preset is Cookiebot's out-of-the-box setup to support U.S. privacy compliance. It aggregates the strictest requirements from active state privacy laws into a single configuration, applies automatically to all U.S. visitors, and includes “Do Not Sell or Share” opt-outs and GPC support. This guide covers what MSPL does, how it compares to state-specific presets, and how to set it up. ## At a Glance - MSPL is the Cookiebot™ out-of-the-box preset that applies one privacy configuration across all your U.S. website traffic. - It aggregates the strictest requirements from currently active U.S. state privacy laws, so you are not building a separate rule for every state. - Built-in features include a "Do Not Sell or Share My Personal Information" opt-out, Global Privacy Control (GPC) honoring, and double opt-in. - MSPL sits alongside state-specific presets (California, Colorado, Connecticut, Utah, Virginia) for site owners who want more granular control. - Usercentrics maintains the template centrally, so it stays current as state laws take effect or change, without any action needed from you. The U.S. does not yet have one federal privacy law. Instead, states have been passing their own, each with its own scope, thresholds, and consumer rights. For a site owner without a legal team on staff, keeping a domain group and geolocation rule current for every state is a lot of ongoing work. MSPL is built to remove that work. ## What Is the MSPL Template? MSPL, short for Multi-State Privacy Law, is a legislation preset inside the Cookiebot Admin Interface. Rather than asking you to configure and maintain a separate setup per state, it gives you one configuration that covers your entire U.S. audience. Behind the scenes, the template aggregates the strictest applicable requirements from the states with active privacy laws into a single, cohesive setup. Select it once, and it applies automatically to all your U.S.-based visitors. There is no per-state geolocation matrix to build or keep up to date. ## Why a Single Template Beats a State-by-State Setup Many small teams and web agencies managing U.S. sites do not have the legal resources or the time to track which states require what, or to update banner logic every time a new law takes effect. A state-by-state approach also means more configurations to test, more edge cases at state borders, and more maintenance every time a legislature amends a law. MSPL is built to run without ongoing per-state maintenance. You configure it once, and Usercentrics keeps the underlying requirements current as the regulatory landscape shifts. ## What the MSPL Preset Actually Does Once applied, the MSPL preset puts three core mechanisms in place for your site: - **An opt-out for the sale and sharing of personal information** — Visitors get a mechanism labeled "Do Not Sell or Share My Personal Information," letting them opt out of both. - **Global Privacy Control (GPC) honoring** — Cookiebot CMP monitors for the GPC signal in a visitor's browser and automatically applies the opt-out when it is enabled, so visitors do not have to set their preference on every site individually. - **Double opt-in** — Visitors who have opted out, whether directly or through GPC, can manually opt back in at any time. ## MSPL or a State-Specific Preset: Which Should You Choose? Both are valid starting points. The right one depends on how much control you need over individual states. **Aspect****MSPL Preset****State-Specific Preset****Coverage**All U.S. visitors, one configurationOne state (CCPA, CPA, CTDPA, UCPA, or VCDPA)**Setup Effort**Single domain groupSeparate domain group and geolocation rule per state**Benefits**Site owners who want minimal ongoing maintenanceTeams with legal guidance requiring per-state customization**Maintenance**Updated centrally by UsercentricsReviewed and updated by you as each law changes You can also combine the two: set up multiple domain groups and use coexisting configurations to serve a different banner depending on visitor location, if some states need tailored treatment while the rest run on MSPL. ## How to Set Up MSPL in the Cookiebot CMP Admin Interface Setup takes only a few clicks, whether you are configuring Cookiebot™ for the first time or adding MSPL to an existing account. ### First-Time Setup If you are setting up Cookiebot™ for the first time, select the MSPL preset during onboarding. This configures your banner to align with U.S. state privacy law requirements, and you can adjust it further at any time. ### Adding MSPL to an Existing Account 1. Go to **Domains & Aliases** and open **Manage your domain groups** (or click **Manage** if you already have multiple groups). 2. Click **+ Create Group**. 3. Name the new group **MSPL** and click **Create group**. 4. Click the **Configure CMP** icon on the right in the new group. 5. Open **Legislation presets** at the top right of the screen, find **MSPL**, and click **Apply preset**. 6. Click **Save changes**. Your MSPL domain group is now active. If you want visitors to see a banner and be offered the "Do Not Sell or Share My Personal Information" choice, mark the **Display banner** checkbox in the group settings. Leaving it unmarked means no banner is shown and tracking runs by default, so review this setting against your own compliance obligations before publishing. ## Consult Qualified Legal Counsel MSPL configures the technical mechanisms most U.S. state privacy laws require on a website, including opt-out choices, GPC honoring, and a way to withdraw consent. It does not cover every obligation those laws place on a business, such as your privacy policy content or internal data handling practices. Consult qualified legal counsel about your specific business operations, data privacy obligations, and compliance initiatives and settings. Treat this guide, and the MSPL preset itself, as one part of a broader compliance program, not a substitute for legal advice. ## Manage multi-state complexity with single platform simplicity Customize your cookie banner for your brand and relevant U.S. regulations in 5 minutes. Then start your free 14-day trial to see it in action. [Start Free Trial](https://admin.cookiebot.com/signup) --- ## Footer ### Products - [Cookiebot™ Consent Solution](https://www.cookiebot.com/us/cookie-consent-solution/) - [Audience Survey](https://www.cookiebot.com/us/audience-survey-add-on/) - [Usercentrics for Wix](https://www.cookiebot.com/us/cookiebot-for-wix-by-usercentrics-app/) - [Usercentrics Cookiebot plugin for WordPress](https://www.cookiebot.com/us/new-wp-cookie-plugin/) - [Cookiebot CMP for Shopify](https://www.cookiebot.com/us/cookiebot-cmp-for-shopify/) - [Cookie checker](https://www.cookiebot.com/us/cookie-checker/) - [Usercentrics products](https://usercentrics.com/us/) - [Pricing](https://www.cookiebot.com/us/pricing/) ### Regulations - [DMA (EU)](https://www.cookiebot.com/us/digital-markets-act-dma/) - [GDPR (EU)](https://www.cookiebot.com/us/gdpr/) - [CCPA (California)](https://www.cookiebot.com/us/what-is-ccpa/) - [VCDPA (Virginia)](https://www.cookiebot.com/us/virginia-vcdpa/) - [LGPD (Brazil)](https://www.cookiebot.com/us/lgpd/) - [TCF v2.4 (IAB)](https://www.cookiebot.com/us/tcf/) - [Google Consent Mode (EU)](https://www.cookiebot.com/us/cookiebot-cmp-google-consent-mode/) - [Microsoft UET Consent Mode](https://www.cookiebot.com/us/microsoft-consent-mode-cmp/) - [View all regulations](/us/regulations-and-frameworks/#united-states-state&united-states-federal) ### Partners - [Become an affiliate](https://www.cookiebot.com/us/affiliates/) - [Affiliate Login](https://app.impact.com/login.user) - [Become a partner](https://www.cookiebot.com/us/resellers/) - [Find a partner](https://www.cookiebot.com/us/cookiebot-reseller/) ### Resources - [Blog](https://www.cookiebot.com/us/blog/) - [Customer stories](https://www.cookiebot.com/us/customer-stories/) - [Customer directory](https://www.cookiebot.com/us/cookiebot-customer-directory/) - [Digital Markets Act Hub](https://www.cookiebot.com/us/digital-markets-act-dma-resources/) - [Google Consent Mode Hub](https://www.cookiebot.com/us/google-consent-mode-resources/) - [Google Consent Mode V2 certification](https://courses.usercentrics.com/course/google-consent-mode-v2) - [Google Consent Audit Fixes](https://www.cookiebot.com/us/google-consent-audit-fixes/) - [Cookie Banner Cost Calculator](https://www.cookiebot.com/us/cookie-banner-pricing-calculator/) ### Company - [About us](https://www.cookiebot.com/us/about/) - [Careers](https://usercentrics.com/career/) - [Support](https://support.cookiebot.com/hc/en-us/) - [Developer documentation](https://www.cookiebot.com/us/developer/) ©2026 Cookiebot. All rights reserved. Cookiebot is a trademark of Usercentrics A/S. Usercentrics A/S is registered in Denmark. Company reg. no.: 34624607. Do Not Sell or Share My Personal InformationData Subject RequestsManage Your Preferences [Privacy Policy](https://www.cookiebot.com/us/privacy-policy/) · [Terms of Service](/en/terms-of-service/) · [Cookie Declaration](https://www.cookiebot.com/us/cookie-declaration/) · [Data Processing Agreement](/us/data-processing-agreement/) · [Legal Notice](https://www.cookiebot.com/us/legal-notice/) · [Accessibility Statement](/en/accessibility-statement-wcag-compliance/)