Chapter Name Short

Limit Use Collection Fair Credit Reporting Act FCRA

Combating the Assault of Non-solicited Pornography and Marketing
Limit Use Collection CAN-SPAM
Act
Limit Use Collection Children’s Online Privacy Protection Act COPPA
Limit Use Collection Fair and Accurate Credit Transactions Act FACTA
Workplace Employee Polygraph Protection Act EPPA
Limit Use Collection Telemarketing Sales Rule TSR
Govt/Court Access Electronic Communications Privacy Act ECPA
Limit Use Collection Cable Communications Privacy Act CCPA
State Laws California Electronic Communications Privacy Act CalECPA
State Laws Illinois Biometric Information Privacy Act BIPA
State Laws California Consumer Privacy Act CCPA
Limit Use Collection Video Privacy Protection Act Amendments Act
State Laws Illinois Right to Know Act
State Laws New Jersey Personal Information and Privacy Protection Act NJPIPPA
Limit Use Collection Family Educational Rights and Privacy Act FERPA
State Laws Washington Biometric Privacy Law HP1493
Limit Use Collection Financial Services Modernization Act (“Gramm-Leach-Bliley”) GLBA
State Laws Texas Biometric Privacy Act
Workplace Genetic Information Nondiscrimination Act GINA
Govt/Court Access Right to Financial Privacy Act RFPA
Limit Use Collection Health Insurance Portability and Accountability Act HIPAA
Limit Use Collection Junk Fax Prevention Act JFPA
Other General Data Protection Regulation GDPR
Other Network Advertising Intitiative Code of Conduct NAI
State Laws California Online Privacy Protection Act CalOPPA
State Laws Nevada SB 538
Other Asia-Pacific Economic Cooperation Privacy Framework APEC
Limit Use Collection Confidentiality of Substance Use Disorder Patient Records Rule 42 CFR Part 2
Limit Use Collection Telecommunications Act
Limit Use Collection Video Privacy Protection Act VPPA
State Laws California SB-1
State Laws Delaware Online Privacy and Protection Act DOPPA
Govt/Court Access Bank Secrecy Act BSA
Govt/Court Access USA-Patriot Act
Govt/Court Access USA Freedom Act
Govt/Court Access Foreign Intelligence Surveillance Act FISA
Limit Use Collection Federal Trade Commission Act FTCA
Limit Use Collection Health Information Technology for Economic and Clinical Health HITECH
Limit Use Collection 21st Century Cures Act
Limit Use Collection Dodd-Frank Wall Street Reform and Consumer Protection Act
Limit Use Collection Telephone Consumer Protection Act TCPA
Govt/Court Access Communications Assistance to Law Enforcement Act CALEA
Govt/Court Access Cybersecurity Information Sharing Act CISA
Govt/Court Access Privacy Protection Act
Workplace Americans with Diabilities Act ADA
Workplace Civil Rights Act CRA
 New York State Department of Financial Services CyberSecurity
State Laws NYDFS
Regulation
State Laws Tennessee SB 2005
State Laws Illinois HB1260
State Laws California AB 2828
State Laws New Mexico HB 15
State Laws Massachusetts HB 4806
State Laws

State Laws
Year Scope Exceptions Privacy Rule
Consent Req Notice Safeguards Right of Action
YES,
1970 YES YES
employer,
YES, sexually
2003 YES, opt-out NO
explicit
1998 YES, 3rd Party YES NO
2003 YES YES, Disposal
1988 YES YES
YES, robo + YES, if
Wiretap, charges
YES, 1-party intrusion of
1986 law enforcement, 1-party consent YES YES
Stored, Pen (wiretap)
1984 YES YES YES
2015 warrant YES YES YES
2008 Biometric data YES YES YES
2018 For-Profit, PI Deidentified YES YES
Renter/Subscr
2012 YES YES
iber
2017 YES
2017 YES
Fed funded YES, but can
1974 YES, annually NO
EDU release
2017 Biometric data photographs YES YES NO
1999 NO, opt-out YES YES NO
2009 Biometric data N/A N/A NO
NO
warrant,
1978 YES YES, 10-days
subpoena
1996 PHI YES, 3rd Party YES YES
2005 EBR YES YES
2018 YES YES YES
YES YES
2003 YES
2017 YES
2004 YES YES
emergencies
YES YES
, special
1996 CPNI YES
1988 YES
Financial YES
advertising to
2016 YES
minors,
1970 Large xfers eft, atm NO
2001 NO
2015 NO
1978 N/A, FISC
UDTPs
2009 ePHI
2016
Financial
2010
UDAAP
1991

2015
1980

1964
2017 YES
 Preemption
YES* limited,
increased due
YES
YES
YES
NO
Name Short Oversight
Federal Trade Commission FTC
Federal Communications Commission FCC
Department of Commerce DoC
Department of Health and Human Services DHHS
Federal Reserve Board FRB
Comptroller of the Currency COC
Organization for Economic Cooperation and Development OECD
Global Privacy Enforcement Network GPEN
Asia-Pacific Economic Cooperation APEC
Consumer Financial Protection Bureau CFPB
Department of Labor DoL
Equal Employment Opportunity Commission EEOC
National Labor Relations Board NLRB
Occupational Safety and Health Act OSHA
Securities and Exchange Commission SEC
 Data
Types
Name+ Name+ Name+ Financial Biometri Public IP
State SSN StateID Financial Health Acct Govt ID c DNA Info Address Unencrypted
Alaska YES YES YES YES YES
California YES YES YES YES YES YES YES
Louisiana YES YES YES YES
Maryland
Massachusett YES YES YES YES YES YES YES
s YES YES YES YES
Nevada
New YES YES YES YES YES
Hampshire YES YES YES YES
North Carolina YES YES YES YES YES YES YES
South Carolina YES YES YES YES YES
Tennessee YES YES YES YES
Virginia YES YES YES YES YES
Washington YES YES YES YES YES
Alabama YES YES YES YES YES YES
Arizona YES YES YES YES
Arkansas YES YES YES YES YES YES
Colorado YES YES YES YES YES YES YES
Connecticut YES YES YES YES
Delaware YES YES YES YES YES YES YES YES
Florida YES YES YES YES YES
Georgia YES YES YES YES YES
Hawaii YES YES YES YES
Idaho YES YES YES YES
Illinois YES YES YES YES YES YES
Indiana YES YES YES YES
Iowa YES YES YES YES YES
Kansas YES YES YES YES
Kentucky YES YES YES YES
Maine YES YES YES YES YES
Michigan YES YES YES YES YES
Minnesota YES YES YES YES
Mississippi YES YES YES YES
Missouri YES YES YES YES YES
Montana YES YES YES YES YES YES
Nebraska YES YES YES YES YES
New Jersey YES YES YES YES
New Mexico YES YES YES YES YES YES
New York YES YES YES YES YES YES
North Dakota YES YES YES YES YES
Ohio YES YES YES YES
Oklahoma YES YES YES YES
Oregon YES YES YES YES YES YES YES
Pennsylvania YES YES YES YES
Rhode Island YES YES YES YES YES
South Dakota YES YES YES YES YES YES
Texas YES YES YES YES YES YES
Utah YES YES YES YES
 Vermont YES YES YES YES YES
West Virginia YES YES YES YES
Wisconsin YES YES YES YES YES YES
Wyoming YES YES YES YES YES YES YES
 Location Private
Other
Number Safeguar AG
Encrypted Services Right of Limits d Delay Notificati

YES w/ YES >1000

Key YES CA
YES
YES Encryp
YES t
YES
YES >1000
YES
YES 45
YES YES days
YES
YES

>10K
GA

YES w/
Key

>1000

>500

>1000 45
NM days
>5000

>500

>10K