The privacy laws in the United States are numerous, vary from state to state, include some federal laws, and have immediate and far-reaching implications for franchisors and franchisees. Additionally, there are non-US privacy laws that affect franchising in the United States.
In the United States, three states – California, Colorado and Virginia – have so-called extensive data protection laws in place to protect consumers and regulate the way companies conduct their collection of personal / private information from consumers. California passed the most comprehensive data protection act, first with the California Consumer Privacy Act (CCPA) and then the California Privacy Rights Act (CPRA), and other states are following its model, which essentially requires compliance by anyone who reaches certain levels of revenue and volume of data , or organizational criteria that are likely to include many, if not most, of the franchisors and / or franchisees when they receive another party's personal or identifying information.
