US Approach in Context
The lack of comprehensive federal breach, security, and destruction requirements leads some to call the US less stringent than jurisdictions like Europe. In practice, intense US attention to breaches has often produced more rigorous security programs than elsewhere.
How this supports CIPP/US study
Use this lesson to compare state-law scope, rights, exceptions and enforcement before choosing an answer. Continue with the CIPP/US practice exam.
State breach, security, and destruction laws together form an important pillar of US data protection. While the absence of comprehensive federal requirements leads some observers to view the US as less stringent than the EU, the intensive US focus on breaches has frequently driven more rigorous information security programs than in many other jurisdictions.
Sources and study method
This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.