This proposed bill aims to increase transparency and accountability in the use of automated decision systems, requiring companies to assess and mitigate potential biases and discrimination in their algorithms; this bill was introduced but did not pass, however it represents the type of policy that is being proposed and may be enacted in the future as the legal landscape evolves. (Note: The Algorithmic Accountability Act of 2022 was introduced but did not pass into law. This entry serves as an example of potential future regulatory trends.)

The NIST Cybersecurity Framework provides a set of standards, guidelines, and best practices to help organizations manage cybersecurity risks, with version 1.1 published in 2018, and ongoing updates since then; it encourages a risk-based approach to cybersecurity and offers a common language for discussing and managing cyber risks. (Note that there have been updates since 2018, as this is an ongoing framework with continuous improvement). Note: This policy is not a law but has significant influence in security compliance programs, and thus is included here . It is highly referenced and often considered a baseline requirement by many organizations, especially in government contracting.

The CCPA grants California consumers various rights over their personal data, including the right to know what personal information is collected about them, the right to delete personal information, and the right to opt-out of the sale of their personal information; it came into effect on January 1, 2020, and has been amended several times since then. The penalties for non-compliance can be significant, leading to fines and potential lawsuits.