Information Privacy
Information Privacy
The Sectoral United States Approach
Data inventories, actors, collection, purpose, consent, notice, minimization, use, disclosure, retention, access, correction, security, FTC unfairness and deception, FCRA, sectoral laws, state comprehensive statutes, vendors, and rights requests.
Structured Visual
Jurisdiction: US; as of 2026-08-28; not legal advice; Render structure, refuse interpretation, cite, abstain, and hand off.
RENDER STRUCTURE · REFUSE INTERPRETATION · CITE · ABSTAIN · HAND-OFF: render structure, refuse interpretation, cite provenance, abstain when unsupported, and hand off to human review.
Scope and honesty note
Jurisdiction: United States federal IP, privacy, consumer-data, and cybersecurity overview as of 2026-08-29; state, international, sectoral, contractual, factual, procedural, remedial, and version differences matter. Synthetic records are classroom inputs, not legal, licensing, infringement, registration, patentability, trademark, trade-secret, privacy, HIPAA, consumer-reporting, security, incident-response, criminal, health, identity or compliance advice. The model cannot determine ownership, protection, validity, infringement, fair use, obviousness, confusion, secrecy, license compatibility, consent, authorization, breach, liability, reporting, access, eligibility or outcome. Cite, expose gaps, abstain, and hand off.
See the essential structure first
Start with this deliberately incomplete structure, then use the pinned authorities, worked application, exceptions, and handoff below. This deliberately incomplete preview has 4 nodes; exceptions and legal consequences remain in the sourced prose below.
Jurisdiction: US; as of 2026-08-28; not legal advice; Render structure, refuse interpretation, cite, abstain, and hand off.
RENDER STRUCTURE · REFUSE INTERPRETATION · CITE · ABSTAIN · HAND-OFF: render structure, refuse interpretation, cite provenance, abstain when unsupported, and hand off to human review.
Begin with IP, privacy, or security doctrine
United States privacy law is sectoral and increasingly state-specific rather than one comprehensive federal code. The FTC Act reaches unfair or deceptive practices, including unsupported privacy and security representations, through its own predicates. FCRA regulates consumer reporting through provisions beyond its general findings. HIPAA, GLBA, COPPA, FERPA, communications, video, biometric, employment and state comprehensive statutes use different actors, data, purposes, rights, exceptions and enforcement. A sound privacy inventory binds every field and processing activity to the governing regime, geography, purpose, recipient, retention and control without treating a policy as blanket consent.
FTC unfairness and deception
The provision pins unfair or deceptive acts or practices and the Commission's enforcement structure. Verbatim source text: “§45. Unfair methods of competition unlawful; prevention by Commission (a) Declaration of unlawfulness; power to prohibit unfair practices; inapplicability to foreign trade (1) Unfair methods of competition in or affecting commerce, and unfair or deceptive acts or practices in or affecting commerce, are hereby declared unlawful. (2) The Commission is hereby empowered and directed to prevent persons, partnerships, or corporations, except banks, savings and loan institutions described in section 57a(f)(3) of this title, Federal credit unions described in section 57a(f)(4) of this title, common carriers subject to the Acts to regulate commerce, air carriers and foreign air carriers subject to part A of subtitle VII of title 49, and persons, partnerships, or corporations insofar as they are subject to the Packers and Stockyards Act, 1921, as amended [7 U.S.C. 181 et seq.], except as provided in section 406(b) of said Act [7 U.S.C. 227(b)], from using unfair methods of competition in or affecting commerce and unfair or deceptive acts or practices in or affecting commerce. (3) This subsection shall not apply to unfair methods of competition involving commerce with foreign nations (other than import commerce) unless- (A) such methods of competition have a direct, substantial, and reasonably foreseeable effect- (i) on commerce which is not commerce with foreign nations, or on import commerce with foreign nations; or (ii) on export commerce with foreign nations, of a person engaged in such commerce in the United States; and (B) such effect gives rise to a claim under the provisions of this subsection, other than this paragraph. If this subsection applies to such methods of competition only because of the operation of subparagraph (A)(ii), this subsection shall apply to such conduct only for injury to export business in the United States. (4)(A) For purposes of subsection (a), the term "unfair or deceptive acts or practices" includes such acts or practices involving foreign commerce that- (i) cause or are likely to cause reasonably foreseeable injury within the United States; or (ii) involve material conduct occurring within the United States. (B) All remedies available to the Commission with respect to unfair and deceptive acts or practices shall be available for acts and practices described in this paragraph, including restitution to domestic or foreign victims. (b) Proceeding by Commission; modifying and setting aside orders Whenever the Commission shall have reason to believe that any such person, partnership, or corporation has been or is using any unfair method of competition or unfair or deceptive act or practice in or affecting commerce, and if it shall appear to the Commission that a proceeding by it in respect thereof would be to the interest of the public, it shall issue and serve upon such person, partnership, or corporation a complaint stating its charges in that respect and containing a notice of a hearing upon a day and at a place therein fixed at least thirty days after the service of said complaint. The person, partnership, or corporation so complained of shall have the right to appear at the place and time so fixed and show cause why an order should not be entered by the Commission requiring such person, partnership, or corporation to cease and desist from the violation of the law so charged in said complaint. Any person, partnership, or corporation may make application, and upon good cause shown may be allowed by the Commission to intervene and appear in said proceeding by counsel or in person. The testimony in any such proceeding shall be reduced to writing and filed in the office of the Commission. If upon such hearing the Commission shall be of the opinion that the method of competition or the act or practice in question is prohibited by this subchapter, it shall make a report in writing in which it shall state its findings as to the facts and shall issue and cause to be served on such person, partnership, or corporation an order requiring such person, partnership, or corporation to cease and desist from using such method of competition or such act or practice. Until the expiration of the time allowed for filing a petition for review, if no such petition has been duly filed within such time, or, if a petition for review has been filed within such time then until the record in the proceeding has been filed in a court of appeals of the United States, as hereinafter provided, the Commission may at any time, upon such notice and in such manner as it shall deem proper, modify or set aside, in whole or in part, any report or any order made or issued by it under this section. After the expiration of the time allowed for filing a petition for review, if no such petition has been duly filed within such time, the Commission may at any time, after notice and opportunity for hearing, reopen and alter, modify, or set aside, in whole or in part any report or order made or issued by it under this section, whenever in the opinion of the Commission conditions of fact or of law have so changed as to require such action or if the public interest shall so require, except that (1) the said person, partnership, or corporation may, within sixty days after service upon him or it of said report or order entered after such a reopening, obtain a review thereof in the appropriate court of appeals of the United States, in the manner provided in subsection (c) of this section; and (2) in the case of an order, the Commission shall reopen any such order to consider whether such order (including any affirmative relief provision contained in such order) should be altered, modified, or set aside, in whole or in part, if the person, partnership, or corporation involved files a request with the Commission which makes a satisfactory showing that changed conditions of law or fact require such order to be altered, modified, or set aside, in whole or in part. The Commission shall determine whether to alter, modify, or set aside any order of the Commission in response to a request made by a person, partnership, or corporation under paragraph 1 (2) not later than 120 days after the date of the filing of such request. (c) Review of order; rehearing Any person, partnership, or corporation required by an order of the Commission to cease and desist from using any method of competition or act or practice may obtain a review of such order in the court of appeals of the United States, within any circuit where the method of competition or the act or practice in question was used or where such person, partnership, or corporation resides or carries on business, by filing in the court, within sixty days from the date of the service of such order, a written petition praying that the order of the Commission be set aside. A copy of such petition shall be forthwith transmitted by the clerk of the court to the Commission, and thereupon the Commission shall file in the court the record in the proceeding, as provided in section 2112 of title 28. Upon such filing of the petition the court shall have jurisdiction of the proceeding and of the question determined therein concurrently with the Commission until the filing of the record and shall have power to make and enter a decree affirming, modifying, or setting aside the order of the Commission, and enforcing the same to the extent that such order is affirmed and to issue such writs as are ancillary to its jurisdiction or are necessary in its judgement to prevent injury to the public or to competitors pendente lite. The findings of the Commission as to the facts, if supported by evidence, shall be conclusive. To the extent that the order of the Commission is affirmed, the court shall thereupon issue its own order commanding obedience to the terms of such order of the Commission. If either party shall apply to the court for leave to adduce additional evidence, and shall show to the satisfaction of the court that such additional evidence is material and that there were reasonable grounds for the failure to adduce such evidence in the proceeding before the Commission, the court may order such additional evidence to be taken before the Commission and to be adduced upon the hearing in such manner and upon such terms and conditions as to the court may seem proper. The Commission may modify its findings as to the facts, or make new findings, by reason of the additional evidence so taken, and it shall file such modified or new findings, which, if supported by evidence, shall be conclusive, and its recommendation, if any, for the modification or setting aside of its original order, with the return of such additional evidence. The judgment and decree of the court shall be final, except that the same shall be subject to review by the Supreme Court upon certiorari, as provided in section 1254 of title 28. (d) Jurisdiction of court Upon the filing of the record with it the jurisdiction of the court of appeals of the United States to affirm, enforce, modify, or set aside orders of the Commission shall be exclusive. (e) Exemption from liability No order of the Commission or judgement of court to enforce the same shall in anywise relieve or absolve any person, partnership, or corporation from any liability under the Antitrust Acts. (f) Service of complaints, orders and other processes; return Complaints, orders, and other processes of the Commission under this section may be served by anyone duly authorized by the Commission, either (a) by delivering a copy thereof to the person to be served, or to a member of the partnership to be served, or the president, secretary, or other executive officer or a director of the corporation to be served; or (b) by leaving a copy thereof at the residence or the principal office or place of business of such person, partnership, or corporation; or (c) by mailing a copy thereof by registered mail or by certified mail addressed to such person, partnership, or corporation at his or its residence or principal office or place of business. The verified return by the person so serving said complaint, order, or other process setting forth the manner of said service shall be proof of the same, and the return post office receipt for said complaint, order, or other process mailed by registered mail or by certified mail as aforesaid shall be proof of the service of the same. (g) Finality of order An order of the Commission to cease and desist shall become final- (1) Upon the expiration of the time allowed for filing a petition for review, if no such petition has been duly filed within such time; but the Commission may thereafter modify or set aside its order to the extent provided in the last sentence of subsection (b). (2) Except as to any order provision subject to paragraph (4), upon the sixtieth day after such order is served, if a petition for review has been duly filed; except that any such order may be stayed, in whole or in part and subject to such conditions as may be appropriate, by- (A) the Commission; (B) an appropriate court of appeals of the United States, if (i) a petition for review of such order is pending in such court, and (ii) an application for such a stay was previously submitted to the Commission and the Commission, within the 30-day period beginning on the date the application was received by the Commission, either denied the application or did not grant or deny the application; or (C) the Supreme Court, if an applicable petition for certiorari is pending. (3) For purposes of subsection (m)(1)(B) and of section 57b(a)(2) of this title, if a petition for review of the order of the Commission has been filed- (A) upon the expiration of the time allowed for filing a petition for certiorari, if the order of the Commission has been affirmed or the petition for review has been dismissed by the court of appeals and no petition for certiorari has been duly filed; (B) upon the denial of a petition for certiorari, if the order of the Commission has been affirmed or the petition for review has been dismissed by the court of appeals; or (C) upon the expiration of 30 days from the date of issuance of a mandate of the Supreme Court directing that the order of the Commission be affirmed or the petition for review be dismissed. (4) In the case of an order provision requiring a person, partnership, or corporation to divest itself of stock, other share capital, or assets, if a petition for review of such order of the Commission has been filed- (A) upon the expiration of the time allowed for filing a petition for certiorari, if the order of the Commission has been affirmed or the petition for review has been dismissed by the court of appeals and no petition for certiorari has been duly filed; (B) upon the denial of a petition for certiorari, if the order of the Commission has been affirmed or the petition for review has been dismissed by the court of appeals; or (C) upon the expiration of 30 days from the date of issuance of a mandate of the Supreme Court directing that the order of the Commission be affirmed or the petition for review be dismissed. (h) Modification or setting aside of order by Supreme Court If the Supreme Court directs that the order of the Commission be modified or set aside, the order of the Commission rendered in accordance with the mandate of the Supreme Court shall become final upon the expiration of thirty days from the time it was rendered, unless within such thirty days either party has instituted proceedings to have such order corrected to accord with the mandate, in which event the order of the Commission shall become final when so corrected. (i) Modification or setting aside of order by Court of Appeals If the order of the Commission is modified or set aside by the court of appeals, and if (1) the time allowed for filing a petition for certiorari has expired and no such petition has been duly filed, or (2) the petition for certiorari has been denied, or (3) the decision of the court has been affirmed by the Supreme Court, then the order of the Commission rendered in accordance with the mandate of the court of appeals shall become final on the expiration of thirty days from the time such order of the Commission was rendered, unless within such thirty days either party has instituted proceedings to have such order corrected so that it will accord with the mandate, in which event the order of the Commission shall become final when so corrected. (j) Rehearing upon order or remand If the Supreme Court orders a rehearing; or if the case is remanded by the court of appeals to the Commission for a rehearing, and if (1) the time allowed for filing a petition for certiorari has expired, and no such petition has been duly filed, or (2) the petition for certiorari has been denied, or (3) the decision of the court has been affirmed by the Supreme Court, then the order of the Commission rendered upon such rehearing shall become final in the same manner as though no prior order of the Commission had been rendered. (k) "Mandate" defined As used in this section the term "mandate", in case a mandate has been recalled prior to the expiration of thirty days from the date of issuance thereof, means the final mandate. (l) Penalty for violation of order; injunctions and other appropriate equitable relief Any person, partnership, or corporation who violates an order of the Commission after it has become final, and while such order is in effect, shall forfeit and pay to the United States a civil penalty of not more than $10,000 for each violation, which shall accrue to the United States and may be recovered in a civil action brought by the Attorney General of the United States. Each separate violation of such an order shall be a separate offense, except that in a case of a violation through continuing failure to obey or neglect to obey a final order of the Commission, each day of continuance of such failure or neglect shall be deemed a separate offense. In such actions, the United States district courts are empowered to grant mandatory injunctions and such other and further equitable relief as they deem appropriate in the enforcement of such final orders of the Commission. (m) Civil actions for recovery of penalties for knowing violations of rules and cease and desist orders respecting unfair or deceptive acts or practices; jurisdiction; maximum amount of penalties; continuing violations; de novo determinations; compromise or settlement procedure (1)(A) The Commission may commence a civil action to recover a civil penalty in a district court of the United States against any person, partnership, or corporation which violates any rule under this subchapter respecting unfair or deceptive acts or practices (other than an interpretive rule or a rule violation of which the Commission has provided is not an unfair or deceptive act or practice in violation of subsection (a)(1)) with actual knowledge or knowledge fairly implied on the basis of objective circumstances that such act is unfair or deceptive and is prohibited by such rule. In such action, such person, partnership, or corporation shall be liable for a civil penalty of not more than $10,000 for each violation. (B) If the Commission determines in a proceeding under subsection (b) that any act or practice is unfair or deceptive, and issues a final cease and desist order, other than a consent order, with respect to such act or practice, then the Commission may commence a civil action to obtain a civil penalty in a district court of the United States against any person, partnership, or corporation which engages in such act or practice- (1) after such cease and desist order becomes final (whether or not such person, partnership, or corporation was subject to such cease and desist order), and (2) with actual knowledge that such act or practice is unfair or deceptive and is unlawful under subsection (a)(1) of this section. In such action, such person, partnership, or corporation shall be liable for a civil penalty of not more than $10,000 for each violation. (C) In the case of a violation through continuing failure to comply with a rule or with subsection (a)(1), each day of continuance of such failure shall be treated as a separate violation, for purposes of subparagraphs (A) and (B). In determining the amount of such a civil penalty, the court shall take into account the degree of culpability, any history of prior such conduct, ability to pay, effect on ability to continue to do business, and such other matters as justice may require. (2) If the cease and desist order establishing that the act or practice is unfair or deceptive was not issued against the defendant in a civil penalty action under paragraph (1)(B) the issues of fact in such action against such defendant shall be tried de novo. Upon request of any party to such an action against such defendant, the court shall also review the determination of law made by the Commission in the proceeding under subsection (b) that the act or practice which was the subject of such proceeding constituted an unfair or deceptive act or practice in violation of subsection (a). (3) The Commission may compromise or settle any action for a civil penalty if such compromise or settlement is accompanied by a public statement of its reasons and is approved by the court. (n) Standard of proof; public policy considerations The Commission shall have no authority under this section or section 57a of this title to declare unlawful an act or practice on the grounds that such act or practice is unfair unless the act or practice causes or is likely to cause substantial injury to consumers which is not reasonably avoidable by consumers themselves and not outweighed by countervailing benefits to consumers or to competition. In determining whether an act or practice is unfair, the Commission may consider established public policies as evidence to be considered with all other evidence. Such public policy considerations may not serve as a primary basis for such determination. (Sept. 26, 1914, ch. 311, §5, 38 Stat. 719 ; Mar. 21, 1938, ch. 49, §3, 52 Stat. 111 ; June 23, 1938, ch. 601, title XI, §1107(f), 52 Stat. 1028 ; June 25, 1948, ch. 646, §32(a), 62 Stat. 991 ; May 24, 1949, ch. 139, §127, 63 Stat. 107 ; Mar. 16, 1950, ch. 61, §4(c), 64 Stat. 21 ; July 14, 1952, ch. 745, §2, 66 Stat. 632 ; Pub. L. 85–726, title XIV, §§1401(b), 1411, Aug. 23, 1958, 72 Stat. 806 , 809; Pub. L. 85–791, §3, Aug. 28, 1958, 72 Stat. 942 ; Pub. L. 85–909, §3, Sept. 2, 1958, 72 Stat. 1750 ; Pub. L. 86–507, §1(13), June 11, 1960, 74 Stat. 200 ; Pub. L. 93–153, title IV, §408(c), (d), Nov. 16, 1973, 87 Stat. 591 , 592; Pub. L. 93–637, title II, §§201(a), 204(b), 205(a), Jan. 4, 1975, 88 Stat. 2193 , 2200; Pub. L. 94–145, §3, Dec. 12, 1975, 89 Stat. 801 ; Pub. L. 96–37, §1(a), July 23, 1979, 93 Stat. 95 ; Pub. L. 96–252, §2, May 28, 1980, 94 Stat. 374 ; Pub. L. 97–290, title IV, §403, Oct. 8, 1982, 96 Stat. 1246 ; Pub. L. 98–620, title IV, §402(12), Nov. 8, 1984, 98 Stat. 3358 ; Pub. L. 100–86, title VII, §715(a)(1), Aug. 10, 1987, 101 Stat. 655 ; Pub. L. 103–312, §§4, 6, 9, Aug. 26, 1994, 108 Stat. 1691 , 1692, 1695; Pub. L. 109–455, §§3, 13, Dec. 22, 2006, 120 Stat. 3372 , 3382; Pub. L. 112–203, §1, Dec. 4, 2012, 126 Stat. 1484 .) Amendment of Section For repeal of amendment by section 13 of Pub. L. 109–455, see Termination Date of 2006 Amendment note below.” Source: 15 U.S.C. § 45; https://www.neochart.com/catalog/federal/title_15/section_45/title15_sec45_b96b57465c31/45_unfair_methods_of_competition_unlawful_prevention_by_comm_0001/index.html; data via neochart.com, snapshot 2026-08.
FCRA purpose
The provision pins accuracy, fairness, privacy, efficiency and consumer-reporting purposes rather than every operational duty. Verbatim source text: “§1681. Congressional findings and statement of purpose (a) Accuracy and fairness of credit reporting The Congress makes the following findings: (1) The banking system is dependent upon fair and accurate credit reporting. Inaccurate credit reports directly impair the efficiency of the banking system, and unfair credit reporting methods undermine the public confidence which is essential to the continued functioning of the banking system. (2) An elaborate mechanism has been developed for investigating and evaluating the credit worthiness, credit standing, credit capacity, character, and general reputation of consumers. (3) Consumer reporting agencies have assumed a vital role in assembling and evaluating consumer credit and other information on consumers. (4) There is a need to insure that consumer reporting agencies exercise their grave responsibilities with fairness, impartiality, and a respect for the consumer's right to privacy. (b) Reasonable procedures It is the purpose of this subchapter to require that consumer reporting agencies adopt reasonable procedures for meeting the needs of commerce for consumer credit, personnel, insurance, and other information in a manner which is fair and equitable to the consumer, with regard to the confidentiality, accuracy, relevancy, and proper utilization of such information in accordance with the requirements of this subchapter. (Pub. L. 90–321, title VI, §602, as added Pub. L. 91–508, title VI, §601, Oct. 26, 1970, 84 Stat. 1128 .)” Source: 15 U.S.C. § 1681; https://www.neochart.com/catalog/federal/title_15/section_1681/title15_sec1681_bdbfc2128004/1681_congressional_findings_and_statement_of_purpose_0001/index.html; data via neochart.com, snapshot 2026-08.
Employment medical-data coordinate
The ADA provision supplies one sector-specific confidentiality and inquiry regime illustrating the patchwork approach. Verbatim source text: “§12112. Discrimination (a) General rule No covered entity shall discriminate against a qualified individual on the basis of disability in regard to job application procedures, the hiring, advancement, or discharge of employees, employee compensation, job training, and other terms, conditions, and privileges of employment. (b) Construction As used in subsection (a), the term "discriminate against a qualified individual on the basis of disability" includes- (1) limiting, segregating, or classifying a job applicant or employee in a way that adversely affects the opportunities or status of such applicant or employee because of the disability of such applicant or employee; (2) participating in a contractual or other arrangement or relationship that has the effect of subjecting a covered entity's qualified applicant or employee with a disability to the discrimination prohibited by this subchapter (such relationship includes a relationship with an employment or referral agency, labor union, an organization providing fringe benefits to an employee of the covered entity, or an organization providing training and apprenticeship programs); (3) utilizing standards, criteria, or methods of administration- (A) that have the effect of discrimination on the basis of disability; or (B) that perpetuate the discrimination of others who are subject to common administrative control; (4) excluding or otherwise denying equal jobs or benefits to a qualified individual because of the known disability of an individual with whom the qualified individual is known to have a relationship or association; (5)(A) not making reasonable accommodations to the known physical or mental limitations of an otherwise qualified individual with a disability who is an applicant or employee, unless such covered entity can demonstrate that the accommodation would impose an undue hardship on the operation of the business of such covered entity; or (B) denying employment opportunities to a job applicant or employee who is an otherwise qualified individual with a disability, if such denial is based on the need of such covered entity to make reasonable accommodation to the physical or mental impairments of the employee or applicant; (6) using qualification standards, employment tests or other selection criteria that screen out or tend to screen out an individual with a disability or a class of individuals with disabilities unless the standard, test or other selection criteria, as used by the covered entity, is shown to be job-related for the position in question and is consistent with business necessity; and (7) failing to select and administer tests concerning employment in the most effective manner to ensure that, when such test is administered to a job applicant or employee who has a disability that impairs sensory, manual, or speaking skills, such test results accurately reflect the skills, aptitude, or whatever other factor of such applicant or employee that such test purports to measure, rather than reflecting the impaired sensory, manual, or speaking skills of such employee or applicant (except where such skills are the factors that the test purports to measure). (c) Covered entities in foreign countries (1) In general It shall not be unlawful under this section for a covered entity to take any action that constitutes discrimination under this section with respect to an employee in a workplace in a foreign country if compliance with this section would cause such covered entity to violate the law of the foreign country in which such workplace is located. (2) Control of corporation (A) Presumption If an employer controls a corporation whose place of incorporation is a foreign country, any practice that constitutes discrimination under this section and is engaged in by such corporation shall be presumed to be engaged in by such employer. (B) Exception This section shall not apply with respect to the foreign operations of an employer that is a foreign person not controlled by an American employer. (C) Determination For purposes of this paragraph, the determination of whether an employer controls a corporation shall be based on- (i) the interrelation of operations; (ii) the common management; (iii) the centralized control of labor relations; and (iv) the common ownership or financial control, of the employer and the corporation. (d) Medical examinations and inquiries (1) In general The prohibition against discrimination as referred to in subsection (a) shall include medical examinations and inquiries. (2) Preemployment (A) Prohibited examination or inquiry Except as provided in paragraph (3), a covered entity shall not conduct a medical examination or make inquiries of a job applicant as to whether such applicant is an individual with a disability or as to the nature or severity of such disability. (B) Acceptable inquiry A covered entity may make preemployment inquiries into the ability of an applicant to perform job-related functions. (3) Employment entrance examination A covered entity may require a medical examination after an offer of employment has been made to a job applicant and prior to the commencement of the employment duties of such applicant, and may condition an offer of employment on the results of such examination, if- (A) all entering employees are subjected to such an examination regardless of disability; (B) information obtained regarding the medical condition or history of the applicant is collected and maintained on separate forms and in separate medical files and is treated as a confidential medical record, except that- (i) supervisors and managers may be informed regarding necessary restrictions on the work or duties of the employee and necessary accommodations; (ii) first aid and safety personnel may be informed, when appropriate, if the disability might require emergency treatment; and (iii) government officials investigating compliance with this chapter shall be provided relevant information on request; and (C) the results of such examination are used only in accordance with this subchapter. (4) Examination and inquiry (A) Prohibited examinations and inquiries A covered entity shall not require a medical examination and shall not make inquiries of an employee as to whether such employee is an individual with a disability or as to the nature or severity of the disability, unless such examination or inquiry is shown to be job-related and consistent with business necessity. (B) Acceptable examinations and inquiries A covered entity may conduct voluntary medical examinations, including voluntary medical histories, which are part of an employee health program available to employees at that work site. A covered entity may make inquiries into the ability of an employee to perform job-related functions. (C) Requirement Information obtained under subparagraph (B) regarding the medical condition or history of any employee are subject to the requirements of subparagraphs (B) and (C) of paragraph (3). ( Pub. L. 101–336, title I, §102, July 26, 1990, 104 Stat. 331 ; Pub. L. 102–166, title I, §109(b)(2), Nov. 21, 1991, 105 Stat. 1077 ; Pub. L. 110–325, §5(a), Sept. 25, 2008, 122 Stat. 3557 .)” Source: 42 U.S.C. § 12112; https://www.neochart.com/catalog/federal/civil_rights/title_42/chapter_126/section_12112/title42_sec12112_ee69fb3f451d/12112_discrimination_0001/index.html; data via neochart.com, snapshot 2026-08.
Pin the synthetic asset and data record
A synthetic privacy inventory maps fields and inferences to people, sources, systems, purposes, statutes, jurisdictions, notices and consents, vendors, recipients, advertising and model uses, security, retention, deletion, access and correction requests, identity verification, response and appeal events, incidents, complaints, policy versions and review gaps.
Work the source-bound application
The account and device fields enter the general inventory, while employment and health-adjacent fields branch to sector-specific rules. The FTC trace compares actual practices with the notice and substantiation rather than declaring every mismatch deceptive. A consumer-reporting use requires actor and purpose classification beyond section Sixteen-Eighty-One's findings. State access, deletion and opt-out requests are routed by jurisdiction and exemptions; no single consent flag resolves them.
Read the populated audit record
The privacy record contains organization, person, data element, inference, source, collection, system, owner, sensitivity, purpose, regime, geography, actor role, notice, representation, consent, minimization, use, sale or sharing field, recipient, vendor, contract, security control, retention, deletion, access request, correction, portability, opt out, appeal, verification, response, incident, complaint, policy version, discrepancy, and reviewer. The artifact contains 17 populated rows.
Jurisdiction: US; as of 2026-08-28; not legal advice; Render structure, refuse interpretation, cite, abstain, and hand off.
RENDER STRUCTURE · REFUSE INTERPRETATION · CITE · ABSTAIN · HAND-OFF: render structure, refuse interpretation, cite provenance, abstain when unsupported, and hand off to human review.
Read the complete record
The complete record keeps sources, stated facts, and questions for review separate. Pinned authorities: Verbatim statute or bounded case excerpt. 15 U.S.C. § 45: FTC unfairness and deception: The provision pins unfair or deceptive acts or practices and the Commission's enforcement structure.. 15 U.S.C. § 1681: FCRA purpose: The provision pins accuracy, fairness, privacy, efficiency and consumer-reporting purposes rather than every operational duty.. 42 U.S.C. § 12112: Employment medical-data coordinate: The ADA provision supplies one sector-specific confidentiality and inquiry regime illustrating the patchwork approach.. Synthetic asset and data record: Classroom facts, not ownership or compliance conclusions. Organization: Online service collects account, device, location, purchase, inference, support, employment and health-adjacent fields from users and vendors. Processing: Signup, analytics, personalization, advertising, fraud prevention, support, sale or sharing flag, vendor transfer, model training, retention and deletion. Governance: Privacy notice versions, consent events, statutory coverage, consumer requests, identity verification, response, correction, opt out, appeal, security incident and regulator inquiry. Legal and technical trace: Regime, scope, elements, limits, provenance, safeguards and handoff. Inventory: Data element, person, source, collection method, sensitivity, system, owner, purpose, legal regime, geography, retention, recipients and deletion. Actors: Consumer, business, service provider or processor, third party, data broker, consumer reporting agency, furnisher, user, covered entity and employer are regime-specific. FTC: Representation, omission, practice, likely consumer interpretation, substantiation, deception, substantial injury, avoidability, countervailing benefits, enforcement and order. Sectoral regimes: Consumer reports, health, finance, children, education, communications, video, biometrics, employment and government records use different definitions, permissions and rights. State comprehensive laws: Threshold, resident, personal and sensitive data, controller or processor, notice, access, correction, deletion, portability, opt out, appeal, exemptions and enforcement vary. Lifecycle controls: Purpose limitation, minimization, consent, access, vendor contract, security, retention, deletion, request workflow, incident response, audit and correction. Boundary: A privacy policy is evidence and a representation, not universal consent or compliance; one regime's permission or exemption does not transfer to another.
Narrow summary
Inventory each field and processing purpose, choose the applicable sectoral and state regimes, test representations and controls, and never treat policy acceptance as universal permission.