Comprehensive consumer privacy law for California residents; enforced by the CPPA and the California Attorney General.

Protected health information for covered entities and business associates; HHS OCR enforcement.

Financial privacy and Safeguards Rule for financial institutions; FTC and federal banking regulators.

Children under 13 — verifiable parental consent, notice, and data minimisation; FTC enforcement.

Public-company financial controls including IT general controls and data integrity (Section 404).

Unfair or deceptive practices — the de facto federal privacy enforcement vehicle absent comprehensive law.

Student educational records — applies to schools and postsecondary institutions receiving federal funding.

VCDPA, CPA, CTDPA, UCPA, TDPSA, OCPA, MTCDPA, ICDPA, DPDPA-DE, NHPA, NJDPA, and more rolling in through 2026.