The laws, and what they mean in practice
Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.
US federal 4
HIPAA
US federalGoverns protected health information held by the health care system and its vendors: permitted uses and disclosures, patient rights, security safeguards for electronic records, and breach notice.
FTC Act Section 5
US federalThe main federal privacy enforcement tool: unfair or deceptive practices, including privacy promises not kept and unreasonable security.
GLBA
US federalPrivacy notices and opt-outs for sharing customer financial information, and an information security program with specific safeguards under the Safeguards Rule.
SEC cyber disclosure
US federalDisclosure of material cybersecurity incidents within four business days of determining materiality, and annual disclosure of risk management and governance.
This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.