It was not long ago that data privacy was an afterthought for
many companies, and in some regards, it may still be an
afterthought. Since 2018, major laws and regulations governing
companies' collection, use, and disclosure of personal
information have been enacted, including the General Data
Protection Regulation (GDPR), California Consumer Privacy Act
(CCPA) — amended by the California Privacy Rights Act, and
soon to be joined by similar state privacy laws in Colorado,
Connecticut, Indiana, Virginia, and Utah — Strengthening
American Cybersecurity Act, and state data breach notification
laws.
Along with these comprehensive data privacy laws,
industry-specific laws governing the collection, use, and
disclosure of protected health information, credit card
information, controlled unclassified information, and more should
be on the radar for businesses of all shapes and sizes. With all of
these data privacy laws and regulations across the world, and the
increased
