Privacy under federal sector rules
Michigan has no comprehensive consumer-privacy statute as of our last review, so a Detroit product is bound by federal sector law: HIPAA for health data, COPPA for children, GLBA for finance, CAN-SPAM for email and the FTC Act. We map which of these touch your data before designing the schema.