Published: January 2018

Part of the IAPP's Privacy 101 white paper series.

"Privacy and data security is for everyone" is a commonly accepted statement, is largely true, and is completely misleading. There is virtually no company in the U.S. that does not have specific legal obligations and risks related to the privacy and security of personal data. The details may change, depending on the industry and a company’s practices. But for most companies, there is a core set of common obligations in an exceedingly complicated area, where the compliance challenges and legal risks are only growing.

In this white paper, get an overview of the privacy law environment in the U.S., and learn about some broadly reaching laws that likely affect your organization.