Sector privacy rules rather than a state statute
Arizona has no comprehensive state consumer-privacy statute as of our last review, so the rules we design around are federal and sector specific: HIPAA, COPPA, GLBA, CAN-SPAM and the FTC Act. We map what a Mesa site actually collects and keep forms, consent text and retention honest.