FTC Act: Federal Trade Commission Act, particularly Section 5, governing unfair or deceptive practices and establishing privacy and security guidelines
GLBA: Gramm-Leach-Bliley Act, governing the protection of financial information and requiring financial institutions to explain their data-sharing practices
HIPAA: Health Insurance Portability and Accountability Act, governing the protection and privacy of medical and health information
COPPA: Children's Online Privacy Protection Act, regulating the collection and use of personal information from children under 13 years of age
CAN-SPAM Act: Law setting rules for commercial email practices and requiring transparency in email marketing
CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act, comprehensive state privacy laws that often set de facto national standards
VCDPA: Virginia Consumer Data Protection Act, establishing privacy rights for Virginia residents and obligations for businesses processing their data
CPA: Colorado Privacy Act, providing privacy protections for Colorado residents and requirements for businesses handling their personal data
UCPA: Utah Consumer Privacy Act, establishing privacy rights for Utah residents and obligations for businesses processing their personal information
CTDPA: Connecticut Data Privacy Act, protecting privacy rights of Connecticut residents and regulating business data processing practices
GDPR Compliance: While not U.S. law, consideration needed for General Data Protection Regulation if dealing with EU residents' data
PIPEDA Compliance: While not U.S. law, consideration needed for Personal Information Protection and Electronic Documents Act if handling Canadian residents' data
PCI DSS: Payment Card Industry Data Security Standard, establishing security standards for organizations handling credit card information
FERPA: Family Educational Rights and Privacy Act, protecting the privacy of student education records in educational institutions
