Americans with Disabilities Act (ADA): Federal law that requires protection and confidential handling of employee medical information and accommodation requests
Health Insurance Portability and Accountability Act (HIPAA): Federal law governing the protection and confidential handling of protected health information, including employee health records
Fair Credit Reporting Act (FCRA): Federal law that regulates the collection, dissemination, and use of consumer information, including employee background checks and credit reports
Genetic Information Nondiscrimination Act (GINA): Federal law prohibiting discrimination based on genetic information and protecting privacy of genetic data in employment context
Federal Trade Commission Act: Federal law providing general framework for privacy and data security requirements, including enforcement against unfair or deceptive practices
California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): California state laws providing comprehensive privacy rights to California residents, including employees, with specific requirements for data collection and processing
Virginia Consumer Data Protection Act (VCDPA): Virginia state law establishing privacy rights and obligations for processing personal data of Virginia residents
Colorado Privacy Act (CPA): Colorado state law providing privacy protections and rights for Colorado residents regarding their personal data
Gramm-Leach-Bliley Act: Federal law requiring financial institutions to explain their information-sharing practices and protect sensitive data
HITECH Act: Federal law expanding HIPAA requirements and strengthening privacy and security protections for electronic health information
General Data Protection Regulation (GDPR): EU regulation that may apply to US companies handling data of EU residents, requiring comprehensive data protection measures
Equal Employment Opportunity Commission (EEOC) Requirements: Federal requirements regarding the handling of employee demographic and discrimination-related data
National Labor Relations Act (NLRA): Federal law protecting certain employee privacy rights in the context of labor relations and union activities
State Data Breach Notification Laws: Various state laws requiring notification of employees in the event of a data breach affecting their personal information
