Data protection in America is gaining momentum fast! In 2022, several states in America have implemented data protection laws to protect people’s privacy and personal data. The purpose of the lens is to enable organisations that process or store personal information in the USA to know how to do so lawfully so that you do not flout any data protection laws that may be in place. If you have a footprint or have customers in the USA, data protection laws may impact your day-to-day operations. Therefore, you must know whether you:
- must register as a data controller in a particular state.
- need any authorisation to process a particular type of personal information, or
- are allowed to transfer personal information out of the USA to other parts of the world.
These questions may expand over time because of the changing data protection landscape in the USA.
What laws apply to your processing?
Amidst the surge of regulatory developments in America are steps to enact a federal data protection law. America’s president also issued an executive order on the EU-U.S. Data Protection Framework. There are several factors that will influence the data protection landscape in the USA until the end of 2022. Therefore, keeping up to date with the data protection developments in America is so important. That’s why it is important for organisations that have a presence, or customers in America, to understand the data protection laws that apply to them. We monitor data protection developments in America daily. For now, in the absence of a federal data protection law, you need to know which American states have a data protection law in place, and what it says.
Will joining this lens help my organisation comply?
Yes. That’s the short answer. We understand that you may be working with limited resources and budgets. We want to help you in the most efficient and cost-effective way. Our data protection in America lens will help you. This lens combined with our practical core programme takes you through the key actions that your organisation must take to process personal data in America lawfully.