Privacy Laws Protect Your Data. They Don't Hide Your Traffic.
Privacy laws are useful. They make companies explain what they collect. They give you rights to access, delete, or opt out of certain data uses. They also give regulators a way to punish companies that lie about privacy or handle data carelessly.
But there is a catch people miss: privacy laws do not make the network itself private.
If you are on hotel WiFi, airport WiFi, your phone carrier, or your home internet provider, the law may limit what companies can do with your personal data after they collect it. It does not automatically encrypt the connection between your device and the internet.
What privacy laws actually do
In the US, the FTC can act when companies mislead people about privacy or fail to protect data they promised to secure. State privacy laws are also spreading. Trackers from Bloomberg Law and White & Case list about 20 states with comprehensive consumer privacy laws in place or enacted.
Those state laws usually focus on rights like:
- Seeing what personal data a company has about you.
- Asking a company to delete or correct certain data.
- Opting out of some targeted ads or data sales.
- Limiting sensitive data collection in certain cases.
In Europe, GDPR goes further. It requires a lawful basis for processing personal data and gives people rights like access and erasure. That is a big deal if a company has built a profile about you.
Still, these laws mostly govern data after it lands somewhere. They do not stop every network between you and a website from seeing connection metadata.
What they do not hide
Even with good privacy laws, your internet provider can still be part of the path. So can the WiFi network you join while traveling. HTTPS protects the contents of most modern websites, which is good. The network usually cannot read your password or the exact page text.
But metadata can still leak more than you think:
- The domains or services your device connects to.
- DNS lookups, unless they are encrypted or routed through a VPN.
- Timing, traffic volume, and connection patterns.
- Your approximate location based on the network you are using.
That may sound boring until you think about what patterns reveal. A daily connection to a medical portal, a debt collector, a job search site, or a dating app can say plenty without anyone reading the actual page.
Where a VPN fits
A VPN is not a replacement for privacy laws. It will not force a data broker to delete your profile. It will not stop every website from using cookies. It will not make you anonymous.
What it does is narrower and practical: it encrypts the traffic leaving your device and sends it through a VPN server. Your local network and ISP see an encrypted connection to the VPN, not a neat list of every service your phone and laptop are talking to.
That makes the first hop safer. It is especially useful on public WiFi, hotel networks, airports, and mobile connections where you do not control the network.
The simple way to think about it is this: privacy laws are the rules for companies holding your data. A VPN is the lock on the connection before that data leaves your device.
You want both. Laws matter because companies need rules. Encryption matters because you should not have to trust every network you touch.
If you want a cheap, simple lock for that first hop, 99¢ VPN is $11.88/year for one WireGuard device. No giant bundle. No fake countdown timer. Just a basic VPN that keeps your connection from being the easiest thing in the room to read.
Written by the person who runs 99¢ VPN. Not legal advice. Just a practical privacy explanation for normal people who use normal networks.