Are There Privacy Laws that Apply to Your (Small) Business?
But the lack of a general privacy law like the GDPR does not mean that US companies have no privacy obligations.
- But the lack of a general privacy law like the GDPR does not mean that US companies have no privacy obligations.
- These state laws are creating a patchwork of privacy laws that can be more challenging for businesses than a single federal law.
- Second, dissimilar state laws require businesses to sort out how to apply different laws to different consumers.
- "Privacy laws apply based on where the consumer lives, not on where the business is headquartered or which state's laws are selected in the company's Privacy Policy or contracts.