Annex
United States Privacy Regulatory Requirements
This annex defines privacy and AI regulatory requirements applicable to processing of personal data in the United States under the FTC Act, federal sector-specific laws, and state comprehensive privacy laws. It supplements the Privacy and Data Governance Policy and the Privacy Impact and Cross-Border Transfer Procedure.
- Type
- Annex
- Version
- 1.2.14
- Date
- 2026-10-03
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material privacy, regulatory, or AI governance change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Applicable laws and regulatory authorities
- AI and privacy obligations
- Employment and workforce monitoring
- Operational requirements (state comprehensive laws)
- Cross-border transfer mechanisms
- Enforcement and fines
- Limitations
Related documents
- Privacy Jurisdiction Indexprivacy
- Privacy and Data Governance Policyprivacy
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Global Regulatory Applicability Registercompliance
Next
All Documents