Developing a conceptual framework for U.S. data privacy compliance in AI systems: Integrating CCPA and HIPAA Regulations

The rapid adoption of artificial intelligence (AI) across industries has heightened the importance of robust data privacy compliance, particularly in the U.S., where complex regulatory frameworks such as the California Consumer Privacy Act (CCPA) and the Health Insurance Portability and Accountability Act (HIPAA) govern data usage. This paper proposes a conceptual framework to harmonize these regulations within AI system design, emphasizing transparency, accountability, and ethical governance principles. The framework addresses key challenges, including regulatory gaps, legal risks, and ethical concerns, by outlining actionable strategies for integrating privacy safeguards into AI technologies. Practical recommendations are provided for policymakers, developers, and organizations to navigate the regulatory landscape, mitigate risks, and ensure ethical compliance. Additionally, this paper highlights areas for future research to refine the framework and advance the responsible development of AI systems. The proposed approach aims to foster trust, protect user rights, and promote AI's ethical and innovative use in an increasingly digital society.