How is personal data protected when one broad rule does not govern every situation? Sector-specific law targets a particular industry, data type, or use case. In the United States, protection comes from numerous federal and state laws rather than one comprehensive federal statute. section 4.7.3
Examples show how protections follow the context in which data is collected or used:
- The Driver’s Privacy Protection Act governs personal information gathered by state motor-vehicle departments. section 4.7.3
- COPPA addresses children under 13 online and requires privacy notices and verifiable parental consent. section 4.7.3
- VPPA, cable-privacy provisions, GLBA, and FCRA protect audiovisual records, subscriber information, financial data, and credit-related information. section 4.7.3
Figure 4.10 US state privacy law comparison43
Compare how US states add privacy protections alongside federal, sector-focused rules. section 4.7.3

