Absent a federal data privacy law, states and federal agencies have increasingly taken a more active role in issuing new regulations, updating decade-old rules and releasing enforcement actions to companies within their jurisdiction to account for emerging data privacy and security challenges.

The Federal Communications Commission is now the latest agency to take a bigger seat at this regulatory table.