Navigating new US regulatory frameworks for data handling