Several regulations govern data privacy and security in email marketing. The most notable include the GDPR for businesses operating in the European Union, the CCPA for companies dealing with Californian residents, and the CAN-SPAM Act in the United States. These regulations set guidelines on how personal data should be collected, stored, and used.