Digital privacy rights have been a growing point of activism among consumers, legislators, and civil liberties experts. In recent years, protests and petitions have morphed into actual laws. In 2016, the European Union passed the General Data Privacy Regulation (GDPR)—the first major law addressing data protection and privacy. It went into effect in May 2018.
While there is no federal equivalent of GDPR in the United States, a growing number of states and municipalities are passing their own laws that address data privacy and security in some fashion. So far, only California has passed legislation that could be considered on a par with GDPR.