What every website needs to know about US privacy compliance and tracking risk – IAPP

Rita Garry
CIPP/US
Attorney & Counselor
Howard & Howard Attorneys
Dave Smith
Chief Technology Officer
ObservePoint
Most websites are collecting, sharing or exposing more data than their owners realize, and the legal landscape surrounding that activity is changing fast. Nineteen states currently have privacy laws in effect, with four to five more taking effect in 2027-28, and enforcement is accelerating from multiple directions. You'll leave with a clear picture of where enforcement stands today, why compliance requires coordination across legal and technical teams, and a realistic, affordable starting point for reducing risk.
This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Rita Garry
CIPP/US
Attorney & Counselor
Howard & Howard Attorneys
Dave Smith
Chief Technology Officer
ObservePoint
The IAPP is a policy neutral, not-for-profit association founded in 2000 with a mission to define, promote and improve the professions of privacy, AI governance and digital responsibility globally.
Certification
Training
Membership
Conferences and Events
Community
News and resources
Certification
Training
Membership
Conferences and Events
Community
News and resources
North America headquarters
Portsmouth, NH, US
EMEA headquarters
Brussels, Belgium
ANZ office
Sydney, Australia
© 2026 IAPP. All rights reserved.

source