Data Privacy Laws in the USA

Unlike the EU, where the General Data Protection Regulation (GDPR) provides an overarching set of privacy rules, the USA has only regulated on the federal level health and financial information, and a law to prevent spam. Over the last few years, however, a number of states, including California, Virginia, and Colorado, have passed data protection laws that will impact businesses across the US. In the absence of congressional action, many more states are likely to follow suit in the coming years, creating a patchwork of competing and potentially contradictory data protection regulations that will confuse consumers, inflict high compliance costs on organizations, and impose unnecessary constraints on the digital economy.