Sector privacy rules rather than one state statute
Idaho had no comprehensive consumer-privacy statute at our last review, so the obligations that bite are federal and sector specific: HIPAA, COPPA, GLBA, CAN-SPAM and the FTC Act. We build to whichever set your work touches and keep data collection deliberately narrow.