CCPA: California Consumer Privacy Act - Sets a de facto national standard for data privacy protection in the United States, even for businesses operating outside California
CPRA: California Privacy Rights Act - The successor to CCPA, introducing additional privacy protections and creating a dedicated privacy protection agency
VCDPA: Virginia Consumer Data Protection Act - Virginia's comprehensive data privacy law establishing consumer rights and business obligations
CPA: Colorado Privacy Act - Colorado's privacy legislation establishing requirements for data protection and consumer privacy rights
UCPA: Utah Consumer Privacy Act - Utah's privacy law framework for protecting consumer data and establishing business compliance requirements
CTDPA: Connecticut Data Privacy Act - Connecticut's comprehensive privacy legislation protecting consumer data rights
HIPAA: Health Insurance Portability and Accountability Act - Federal law governing the protection of sensitive healthcare data and medical information
GLBA: Gramm-Leach-Bliley Act - Federal law requiring financial institutions to explain their data-sharing practices and protect sensitive financial data
FERPA: Family Educational Rights and Privacy Act - Federal law protecting the privacy of student education records
COPPA: Children's Online Privacy Protection Act - Federal law imposing requirements on operators of websites or online services directed to children under 13
GDPR Compliance: General Data Protection Regulation considerations for US companies processing EU residents' data, including cross-border transfer mechanisms
Data Security Requirements: Specific technical and organizational measures required to ensure appropriate security of personal data processing
Breach Notification: Legal obligations for notifying authorities and affected individuals in case of data breaches
Subprocessor Management: Requirements for managing and overseeing third-party data processors, including approval processes and contractual obligations
Data Subject Rights: Framework for handling individual rights such as access, deletion, correction, and portability of personal data
Data Retention: Requirements for data retention periods and secure deletion procedures
Audit Rights: Provisions for conducting audits and assessments of data processing activities and compliance
Liability Framework: Structure for determining liability and indemnification obligations between parties in case of data protection violations
