The CCPA (2018) and CPRA (2020) grant California consumers broad rights over their personal data, including the right to access, delete, and opt-out of the sale of their data. These laws affect any business collecting data from California residents, regardless of where the business is located. The CPRA expands on the CCPA and establishes the California Privacy Protection Agency (CPPA). These regulations impose stringent data privacy obligations on businesses operating in California, impacting how they collect, use, and protect personal information of consumers residing in California. The CPRA significantly broadened the CCPA's provisions, creating additional rights and obligations for businesses. These updates are designed to give consumers more control over their personal information and increase transparency in data handling practices.

The ADA (1990) prohibits discrimination based on disability in various areas, including employment, public accommodations, and services. Title III of the ADA requires businesses to make their websites and online services accessible to individuals with disabilities, ensuring equal access to information and services. This can include providing alternative text for images, captions for videos, and keyboard navigation for all functionalities. The Act enforces that the private sector take steps to make sure individuals with disabilities can access programs, goods, and services. This federal civil rights law protects individuals with disabilities from being discriminated against in many areas of life.

The GDPR (2018) regulates the processing of personal data of individuals within the European Union (EU) and the European Economic Area (EEA). It grants individuals rights such as the right to access, rectify, and erase their personal data, and it requires businesses to obtain explicit consent for data processing activities. Any company that processes personal data of EU residents, regardless of its location, must comply with the GDPR. It also imposes strict rules about international data transfers out of the EU to ensure the protection travels with the data. The GDPR significantly changed the landscape for privacy and data protection, requiring businesses to implement robust measures to safeguard personal data and ensure transparency in their data processing activities. The law applies not only to organizations located within the EU but also to those located outside the EU if they offer goods or services to, or monitor the behavior of, EU data subjects. This legislation grants individuals greater control over their personal data and imposes strict obligations on businesses to protect such data.