Blog: US Privacy Laws
Page 1
The 2025 TCPA 'Any Reasonable Means' Opt-Out Rule Explained
As of April 2025, the Federal Communications Commission (FCC) requires businesses to honor opt-out requests made through "any reasonable means" under the Telephone Consumer Protection Act (TCPA). The TCPA is a 1991 US federal law that regulates marketing calls and text messages sent using automated systems or prerecorded voices. The FCC...
How to Handle California Consumer Data Requests (CCPA Rights Management)
To handle data requests in accordance with the California Consumer Privacy Act (CCPA), your business needs clear internal procedures, verified request channels, and documented proof that it has complied with the 45-day response deadline. The CCPA gives California residents five enforceable consumer rights, and your business must be able to receive,...
Identity Verification Standards Under GDPR vs. CCPA/CPRA
If your business collects customer data, you're probably familiar with data subject (customer) requests. They often run along the lines of "I want to see the data you hold on me," or "I want you to delete everything you have on me." These requests are common, and it's your job to...
Export Controls and Encryption: Hidden Compliance Risks in Software Licensing
If your software uses cryptographic tools such as encryption, you may be required to comply with U.S. export requirements. This article covers common cryptographic functions in software, U.S. export regulations on software that uses cryptographic tools, and potential compliance risks, and includes a step-by-step guide to managing those risks. How Software Uses...
Anonymized and Pseudonymized Data: Are They Subject to Data Subject Requests?
Privacy laws like the GDPR and CCPA/CPRA grant data subjects several rights over their personal data, but what happens when that data is anonymized or pseudonymized? Do data subject rights still apply, and if so, to what extent? The legal implications of these two de-identification methods differ fundamentally. Truly anonymized data...
Privacy Law Conflicts: When U.S. Employer Policies Clash With EU Employee Rights
U.S. companies with employees located in the European Union (EU) need to ensure their policies are in compliance with EU privacy laws. This article explains what U.S. employers need to know to protect EU employee rights, including what the EU's main privacy law requires and a list of practical compliance tips. What...