Is the U.S. Finally Getting a Comprehensive Cybersecurity and Data Protection Law? What You Need to Know About the Proposed American Data Privacy and Protection Act -

In the beginning of the 2000s, as a result of the advance in technology, the Federal Trade Commission looked to Congress to pass legislation that would ensure protection of citizens' privacy rights. However, Congress thus far has been unable to pass comprehensive privacy protection legislation, leaving it instead to the states to pass their own such legislation in a piecemeal fashion. On the other hand, in 2018, the European Union passed the General Data Protection Regulation ("GDPR"), which is comprehensive throughout the EU and takes a firm stance on data privacy and security, imposing obligations on businesses and organizations that collect consumer data, and levying large fines for violations of the regulation.