Federal

• Federal Law to Protect Consumers' Personal Financial Information: Gramm-Leach-Bliley Act of 1999
  • Federal Trade Commission (FTC) Financial Privacy and Safeguarding Rules Pertaining to the G-L-B Act 
  • FTC Information about Complying with the Safeguarding Rule
• Health Insurance Portability and Accountability Act of 1996 (HIPAA)
• Family Educational Rights and Privacy Act (FERPA)
  • HIPAA/FERPA Joint Guidance December 2019 FAQs
  • FERPA Regulations
• The Privacy Act of 1974, 5 U.S.C. § 552a
  The Act regulates the collection, maintenance, use and dissemination of personal information by federal executive branch agencies.

State

• California Civil Code Section 1798.29
  California Law about Notification in Instances of Security Breaches-effective July 1, 2003
• California Civil Code Section 1798.85
  California Law Restricting Display of Social Security Numbers
• California State Constitution
  Article 1 Declaration of Rights, Section 1: “All people are by nature free and independent and have inalienable rights.  Among these are enjoying and defending life and liberty, acquiring, possessing and protecting property, and pursuing and obtaining safety, happiness and privacy.”
• California Information Practices Act of 1977 (Civil Code §§1798-1798.28)
  Statute defines the limits established to protect the privacy of individuals in the maintenance and dissemination of personal information.
• California Consumer Privacy Act (CCPA) Factsheet
  The CCPA took effect January 1, 2020, and implementing regulations were issued in August 2020.   The CCPA applies to for-profit businesses in California of a certain size.  Although the CCPA does not apply to the non-profit programs and activities of the University of California, the above Factsheet is provided here for UC Davis community members to help you better understand your rights under this law when interacting with for-profit business entities or activities subject to the CCPA.

Other

• Organisation for Economic Cooperation and Development (OECD) Guidelines on the Protection of Privacy and Transborder Flows of Personal Data
  These guidelines represent international consensus on the core principles guiding the collection and management of personal information by governments, business and consumer representatives in their efforts to protect privacy and personal data.