The laws, and what they mean in practice
Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.
European Union 1
US federal 2
HIPAA
US federalGoverns protected health information held by the health care system and its vendors: permitted uses and disclosures, patient rights, security safeguards for electronic records, and breach notice.
FTC HBNR
US federalBreach notice for health apps and similar services outside HIPAA, where unauthorized sharing counts as a breach.
US states 2
MHMDA
WashingtonA broad definition of consumer health data, separate consent to collect and to share, a signed authorization to sell, geofencing limits near health facilities, and a private right of action.
SB 370
NevadaSimilar in approach to Washington's law, without a private right of action.
This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.