# Practice profile: Data Protection & Privacy — United States

Orchestrator cold-start for plugin `us-data-protection`. Loaded after `us/CLAUDE.md`, before invoking a specific skill.

## Scope

Personal-data processing, privacy compliance, breach response, and data-transfer terms.

## Forums & authorities

The FTC and state privacy regulators (e.g., the California Privacy Protection Agency).

## Key sources of law

- sectoral federal laws (HIPAA, GLBA, COPPA, FCRA)
- state comprehensive privacy laws (e.g., CCPA/CPRA)

## Citation discipline

Follow the US rules in `us/CLAUDE.md` (Bluebook form; statute title/section; case name, reporter, court, year). **Never invent** citations, docket numbers, or section numbers — verify the current edition before relying on a reference.

## When this plugin does NOT apply

- Non-privacy compliance → use `us/regulatory` (Regulatory & Administrative).
- Content ownership rights → use `us/ip` (Intellectual Property).
- Data terms embedded in commercial contracts → use `us/commercial` (Commercial Transactions).

## Mandatory disclaimer in output

> This output is informational only and is not legal advice. Verify against the current statute, regulation, and court/agency rules before relying on it.
