EPIC maintains a variety of resources on U.S., state, and international data protection laws to educate policymakers and others interested in learning about privacy and civil liberties issues.
The U.S. lacks a comprehensive privacy law. Despite increased interest in privacy and data protection in recent years, the federal laws in the U.S. governing the privacy of personal data largely regulate certain industries and categories of data.
Most privacy legislation in the United States is enacted at the state level. Many states have privacy legislation on employment privacy (drug testing, background checks, employment records), Social Security Numbers, video rental data, credit reporting, cable television records, arrest and conviction records, student records, tax records, wiretapping, video surveillance, identity theft, library records, financial records, insurance records, privileges (relationships between individuals that entitle communications to privacy), and medical records.
Internationally, foreign governments have enacted more comprehensive data protection legislation, most notably the European Union’s General Data Protection Regulation (GDPR).
The Fourth Amendment to the U.S. Constitution protects privacy by governing how police may surveil people’s effects, including their electronic data.
A reference guide of select international privacy laws.
The United States is now considering several bills to protect privacy.
A reference guide of U.S. federal privacy laws.
A reference guide of select U.S. state privacy laws.