The most prominent privacy laws that include a private right of action include the Telephone Consumer Protection Act (TCPA) and the Fair Credit Reporting Act (FCRA).  Both laws have become popular targets of class-action lawyers, and a number of settlements have reached into the tens of millions of dollars. 

At the state level, the California Consumer Privacy Act (CCPA) gives individuals whose data was involved in a breach the ability to bring a claim if the consumer can show that the company failed to adopt adequate security measures.