Company: SWAGW
Filing Date: 2025-04-14
Form Type: 10-K
Source: 0001213900-25-031596
Chunk: 22

Company: Stran & Company, Inc.
Filing Date: 2025-04-14
Form: 10-K
Item: Item 1
Chunk 22
---
 laws:

●Virginia’s Consumer Data Protection Act (“VCDPA”) establishes
rights for Virginia consumers to control how companies use individuals’ personal data. The VCDPA dictates how companies must protect
personal data in their possession and respond to consumers exercising their rights, as prescribed by the law, regarding such personal
data. The VCDPA went into effect on January 1, 2023.

●The Colorado Privacy Act (the “CPA”) and
Connecticut’s An Act Concerning Personal Data Privacy and Online Monitoring (“CDPA”),
effective as of July 1, 2023, are similar comprehensive consumer privacy laws in Colorado and Connecticut, respectively.

●Effective as of December 31, 2023, the Utah Consumer Privacy
Act (“UCPA”) regulates business handling of consumers’ personal data in Utah.

●Effective as of July 1, 2024, the Texas Data Privacy and Security
Act (“TDPSA”) and the Oregon Consumer Privacy Act (“OCPA”) became comprehensive privacy laws in Texas and
Oregon, respectively.

●Effective as of October 1, 2024, the Montana Consumer Data Privacy
Act (“MCDPA”) became a comprehensive privacy law in Montana.

●Effective as of January 1, 2025, the Iowa Consumer Privacy
Act (“ICPA”), the Delaware Personal Data Privacy Act (“DPDPA”), the Nebraska Data Privacy Act (“NEDPA”),
the New Hampshire Data Privacy Act (“NHDPA”), became comprehensive privacy laws
in Iowa, Delaware, Nebraska, and New Hampshire, respectively.

●Effective as of January 15, 2025, the New Jersey Data Protection
Act (“NJDPA”) became a comprehensive privacy law in New Jersey.

●Effective as of July 1, 2025, the Minnesota Consumer Data Privacy Act (“MCDPA”) and the Tennessee
Information Protection Act (“TIPA”) will become comprehensive privacy laws in Minnesota and Tennessee, respectively.

●Effective as of October 1, 2025, the Maryland Online Data Privacy Act of 2024 (“MODPA”) will
become a comprehensive privacy law in Maryland.

●Effective as of January 1, 2026, the Indiana Consumer Data Protection Act (“ICDPA”), the Kentucky
Consumer Data Protection Act (“KCDPA”), and the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”)
will become comprehensive privacy laws in Indiana, Kentucky, and Rhode Island, respectively.

The European Union (the “EU