The United States uses a combination of federal, state, sectoral, contractual, and enforcement requirements. CloudAlls assesses each service for role, state thresholds, sale or sharing, sensitive data, children, health, financial, and payment activity.
Where applicable, U.S. processes cover access or know, correction, deletion, portability, sale or sharing opt-out, sensitive-data limitations, appeals, authorized agents, minors, and recognized universal opt-out signals. The Privacy Choices page records preferences and provides withdrawal options.
COPPA, HIPAA, the FTC Health Breach Notification Rule, GLBA, PCI DSS, state breach laws, and consumer rules are assessed only when the product and data flow meet their triggers. A general Privacy Policy does not replace a BAA, written safeguards program, payment assessment, or breach plan.
U.S. state request and breach deadlines vary. CloudAlls does not use a universal 72-hour promise for every request. Each case is assigned to the applicable jurisdiction and tracked to its required deadline.