It's at a state level in the US, so it's necessary to look up your state's privacy laws (California was the first to adopt comprehensive privacy legislation but

It's at a state level in the US, so it's necessary to look up your state's privacy laws (California was the first to adopt comprehensive privacy legislation but others have followed). TBH I had never thought about its applicability to hiring process information, since the laws are framed more as a "consumer" right, but it seems possible it's covered under some of these laws.