Instead, it has a mix of laws that go by acronyms like HIPAA, FCRA, FERPA, GLBA, ECPA, COPPA, and VPPA. The data collected by the vast majority of products people use every day isn’t regulated.