CHAPTER 5North American Regulations
You already have zero privacy. Get over it!
—Scott McNealy, CEO Sun Microsystems, 1999
United States
If your business is located in the United States or does business there, pay close attention, and memorize the following. (There will be a quiz!)
ADA, ADEA, APA, BCR, BITAG, BSA, CALEA, CALOPPA, CAN-SPAM, CARU, CCPA, CFPB, CISA, CMIA, COBRA, COPPA, CPBR, CPEA, CPNI, CRA, DAA, DMA, DNC, DNT, DODD-FRANK, DPA, EBR, ECOA, ECPA, EEOC, EHR, EPIC, EPPA, ERISA, ESI, ESRB, FACTA, FATCA, FBI, FCC, FCRA, FDCPA, FERPA, FINCEN, FIPP, FIRREA, FISA, FISC, FLSA, FMLA, FOIA, FTC, GINA, GLBA, GPEN, HHS, HIPAA, HITECH, HITRUST, ICRAA, IRCA, IRS, MSCM, NHTSA, NIH, NIST, NLRA, NLRB, NSA, NSF, NSL, NTIA, PCI-DSS, PCLOB, PHI, PI, PII, PPRA, QPO, RFPA, SAR, SCA, SCC, SOX, TCPA, TSR, UDAP, USA FREEDOM ACT, USA PATRIOT ACT, and VPPA.
Every acronym on this list has some direct or indirect regulatory effect or authority over data privacy. Of course, this is just the list as I write. By the time you're reading this, I suspect that the list will have grown! And that's just at the federal level. The fun really starts at the state level, where—in the absence of a federal preemptive privacy regulation—the local legislators have stepped in and created state-specific regulations. If you're doing business in multiple states, you can expect to spend hours of uninterrupted fun making sure that your business complies with each and every one of those as well.
So what do we do ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access