What’s Changing

The law adds protections for college students and enables private rights of action, allowing individuals to sue if their data is mishandled.