From the Document: "U.S. and European Union (EU) policymakers are focusing on protection of personal data with new and proposed legislation and enforcement actions. Data breaches at companies such as Facebook, Google, and Marriott have contributed to heightened public awareness. The EU's General Data Protection Regulation (GDPR)--which took effect on May 25, 2018--has drawn the attention of U.S. businesses and other stakeholders, prompting debate on U.S. federal and state data privacy and protection policies."
CRS In Focus, IF10896
Congressional Research Service: https://crsreports.congress.gov/