Data privacy in the United States is primarily regulated by multiple entities at both the federal and state levels. At the federal level, the main regulatory bodies include the Federal Trade Commission (FTC), which enforces consumer privacy and data protection laws, and the Department of Health and Human Services (HHS), which oversees the privacy and security of personal health information under the Health Insurance Portability and Accountability Act (HIPAA).