command-and-control, principles-based, co-regulation, and self-regulation — each carry distinctive strengths and weaknesses. - The **US sectoral model** regulates data through sector-specific statutes (HIPAA, FERPA, COPPA, FCRA) enforced by sector regulators and the FTC, leaving significant gaps. -