Data Protection in the United States: Overview

A Q&A guide to data protection in the United States.

This Q&A guide gives a high-level overview of the data protection laws, regulations, and principles in the United States, including the main obligations and processing requirements for data controllers, data processors, or other third parties. It also covers data subject rights, the supervisory authorities' enforcement powers, and potential sanctions and remedies. It briefly covers rules applicable to cookies and commercial messages, including marketing. To compare answers across multiple jurisdictions, visit the Data Protection Country Q&A tool.