Skip to content

Privacy Law

What is Privacy Law?

Legislation that regulates the collection, storage, use, and disclosure of personal information by organizations and governments.

Privacy and Data Protection

Each of these is named in at least one of the same controls as privacy law. The number is how many controls name both.

What the standards actually require on privacy law

Requirements naming privacy law across 6 standards, quoted from the control text.

Per Iowa Code 715D.8 + 715D.9 ICDPA enforcement is exclusively vested in the Iowa Attorney General with no private right of action and offers the LONGEST cure period among US state privacy laws (90 days vs 30 days in Virginia/Indiana/Utah + 60 days original in...

ICDPA-Enforcement-90DayCure-AttorneyGeneralOnly-NoPrivateRight-CivilPenalties-7500-PerViolation-Longest-Cure · Iowa CDPA Enforcement - Attorney General Exclusive + 90-Day Cure Period (LONGEST among US State Privacy Laws) + No Private Right of Action + Civil Penalties Up to USD 7500 Per Violation

Coordination positions INCDPA within the broader US and international privacy regulatory landscape. (1) US State Privacy Law Patchwork: 20+ comprehensive US state privacy laws as of 2026 (California CCPA/CPRA + Virginia VCDPA + Colorado CPA + Utah UCPA + Conne...

INCDPA-Coord-USStatePrivacy-VCDPA-CPA-CTDPA-CCPA-Federal-FTC-DPDP-GDPR-International · Indiana CDPA Coordination - US State Privacy Laws (Virginia/Colorado/Connecticut/Utah/Texas/Iowa+) + Federal Sectoral (HIPAA/GLBA/FCRA/FERPA/COPPA) + FTC Section 5 + GDPR + India DPDP + International Privacy Frameworks

FERPA coordinates with adjacent + overlapping privacy regimes. (1) COPPA (Children Online Privacy Protection Act, 15 USC 6501-6506 + 16 CFR Part 312) - FTC-administered; applies to online services collecting PII from children under 13;

FERPA-Coord-COPPA-PPRA-State · Coordination with COPPA, PPRA, State Student Privacy Laws and Sectoral Laws

Florida FDBR vs comprehensive privacy regimes + federal preemption tracking. GDPR (EU Regulation 2016/679): FDBR is NARROWER (USD 1B big-tech threshold vs GDPR universal applicability) + DIFFERENT RIGHTS STRUCTURE (FDBR has voice/facial recognition opt-out + s...

FDBR-PIPL-Comparison · Comparison with GDPR + Comprehensive Privacy Laws + APRA Federal Preemption Tracking
GLBA1 control

GLBA coordination with related US privacy + financial frameworks. (a) FCRA (FAIR CREDIT REPORTING ACT, 15 USC 1681) - regulates consumer-reporting agencies + furnishers of information + users of consumer reports;

GLBA-Coordination-FCRA-HIPAA-CCPA-Sectoral · GLBA Coordination with FCRA, ECOA, HIPAA, CCPA, State Privacy Laws and Sectoral Frameworks

Questions people ask about privacy law

What is Privacy Law?
Legislation that regulates the collection, storage, use, and disclosure of personal information by organizations and governments.
Why is Privacy Law important for compliance?
Privacy Law is a key concept in Privacy and Data Protection. Understanding privacy law helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Privacy Law?
Privacy Law appears in the requirement text of Iowa Consumer Data Protection Act, Indiana Consumer Data Protection Act, Family Educational Rights and Privacy Act (FERPA), Florida Digital Bill of Rights (FDBR), GLBA. Across these standards we have identified 22 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Privacy Law?
Explore our compliance framework pages to see how privacy law applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Privacy Law applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.