CCPA & CPRA: California Consumer Privacy Act and California Privacy Rights Act - Key privacy regulations for businesses serving California residents, requiring specific disclosures about data collection, use, and consumer rights
State Privacy Laws: Various state-specific privacy laws including Virginia (VCDPA), Colorado (CPA), Utah (UCPA), and Connecticut (CTDPA) - Each with unique requirements for data protection and consumer rights
GLBA: Gramm-Leach-Bliley Act - Federal law requiring financial institutions to explain their information-sharing practices and protect sensitive data
HIPAA: Health Insurance Portability and Accountability Act - Federal law governing privacy and security of medical information and health data
COPPA: Children's Online Privacy Protection Act - Federal law imposing requirements on operators of websites or online services directed to children under 13
FTC Act Section 5: Federal Trade Commission Act Section 5 - Prohibits unfair or deceptive practices in privacy and data security matters
PCI DSS: Payment Card Industry Data Security Standard - Security standards for organizations handling credit card information
FERPA: Family Educational Rights and Privacy Act - Federal law protecting privacy of student education records
GDPR Compliance: General Data Protection Regulation considerations for US companies serving EU residents - Includes data protection principles, legal bases for processing, and cross-border transfer requirements
PIPEDA Considerations: Personal Information Protection and Electronic Documents Act considerations for US companies serving Canadian residents - Includes requirements for consent and data handling
Data Collection Disclosure: Required disclosure of types of personal information collected and methods of collection
Purpose Specification: Clear explanation of why personal information is collected and how it will be used
Data Sharing Practices: Disclosure of how personal information is shared with third parties and for what purposes
Security Measures: Description of measures taken to protect personal information from unauthorized access or disclosure
User Rights: Explanation of users' rights regarding their personal information, including access, correction, deletion, and portability rights
