What legislation exists regarding data protection and security?

Legislation such as the General Data Protection Regulation (GDPR) in the EU and the California Consumer Privacy Act (CCPA) in the US govern data protection and security. These laws outline how personal data should be collected, processed, and stored to ensure individuals' privacy rights are respected. Organizations must comply with these regulations to avoid penalties for mishandling data.