United States
A federal baseline with fifty state overlays, and privacy enforcement that increasingly starts in a browser: state AGs test whether your opt-outs actually work. The Radar maps federal plus every state, because "US law" was never one attachment.
Federal (FTC Act §5, ADA, CAN-SPAM, TCPA, COPPA) → state privacy and consumer statutes → sector and professional boards.
Sub-jurisdictions, live from the matrix
Law counts shown for the solicitors (legal) example; every cell opens the full verbatim stack.
The instruments that do the damage
19 comprehensive state privacy laws in effect during 2026 (20 enacted; Oklahoma effective 1 Jan 2027), with differing thresholds, rights and GPC duties.
California, Colorado and Connecticut ran a joint 2025 sweep on Global Privacy Control compliance; Sephora’s USD 1.2m (2022) started the pattern.
3,117 federal website-accessibility suits filed in 2025; roughly two-thirds of defendants make under USD 25m revenue. [APPROVAL: verify against Seyfarth original]
VPPA (USD 2,500 per viewer), TCPA (USD 500, USD 1,500 per message) and CIPA session-replay theories drive private claims, not just regulator action.
Enforcement climate, cited
Every one of the 50 states is a distinct sub-jurisdiction in the matrix. States without comprehensive privacy laws still carry the federal baseline plus their own UDAP and bar/board rules.
Serving this market? See your stack.
Pick your sector and sub-sector in the Explorer, or start with the introductory audit from this market's vantage.
Applicability depends on confirmed facts about your business (establishment, targeting, reach) and supported scope. Figures are cited to their sources and periods; items marked for approval are re-verified before publication.