IN THE UNITED STATES, there is currently no single comprehensive federal data privacy or security law. Instead, the United States has enacted industry-specific laws about security and privacy. These laws limit the use of personal information based on the nature of the data.

State governments also have entered this regulatory arena. States create data protection laws that are data specific. Many states have created laws to protect health and financial information. They also might try to protect data in certain types of records, such as motor vehicle records. In some ways, states are more aggressive in trying to protect personal information than the federal government. This chapter focuses on state data protection laws. It includes laws from different states to give you an overview of the types of laws being passed to protect data. As you encounter issues regarding the law, security, and privacy, you must consider the impact of state laws and rules.