The CCPA, enacted in 2018, grants California consumers various rights over their personal data, including the right to know, the right to delete, and the right to opt-out of the sale of their personal information, impacting how businesses collect, use, and share data of California residents.. This act was further amended by the California Privacy Rights Act (CPRA) in 2020, expanding consumer rights and establishing the California Privacy Protection Agency (CPPA) to enforce the law and issue regulations. CPRA went into effect January 1, 2023, with enforcement beginning July 1, 2023. The CCPA/CPRA applies to businesses that collect California residents' personal information, do business in California, and meet certain revenue or data processing thresholds.

The CAN-SPAM Act, established in 2003, sets rules for commercial email and gives recipients the right to have businesses stop emailing them. It mandates clear identification of the sender, a physical postal address, an unsubscribe mechanism, and truthful subject lines and content for commercial emails sent to US recipients. Each separate email in violation of the CAN-SPAM Act is subject to penalties of up to $51,744, so non-compliance can be costly. The FTC actively enforces the CAN-SPAM Act.

The TCPA, enacted in 1991, restricts telemarketing calls, autodialed calls, and unsolicited text messages to cell phones without prior express consent. It also requires businesses to maintain a do-not-call list and honor consumer requests not to be contacted. Violations of the TCPA can result in significant fines, up to $1,500 per violation, making compliance crucial for businesses engaging in telemarketing or SMS marketing activities in the US. The FCC enforces TCPA rules, and consumers can also bring private lawsuits for violations.