Gramm-Leach-Bliley Act (GLBA): Federal law that requires financial institutions to protect consumers' personal financial information and explain their information-sharing practices
Health Insurance Portability and Accountability Act (HIPAA): Federal law that establishes standards for the protection and privacy of healthcare-related personal information
Computer Fraud and Abuse Act (CFAA): Federal law addressing computer crimes and unauthorized access to computer systems and data
Electronic Communications Privacy Act (ECPA): Federal law protecting electronic communications from unauthorized interception, access, and disclosure
Federal Trade Commission Act (FTC Act): Federal law prohibiting unfair or deceptive practices in commerce, including data privacy and security practices
California Consumer Privacy Act (CCPA): State law providing California residents with rights regarding the collection and use of their personal information
State Data Protection Laws: Various state-specific laws (e.g., Virginia CDPA, Colorado Privacy Act) governing data protection and privacy rights
Payment Card Industry Data Security Standard (PCI DSS): Industry security standard for organizations handling credit card information
Sarbanes-Oxley Act: Federal law establishing requirements for financial reporting and corporate governance, including data integrity
Family Educational Rights and Privacy Act (FERPA): Federal law protecting the privacy of student education records
Uniform Commercial Code (UCC): Standardized set of laws governing commercial transactions in the United States
Electronic Signatures in Global and National Commerce Act (E-SIGN Act): Federal law ensuring the legal validity of electronic signatures and records
Uniform Electronic Transactions Act (UETA): State law providing uniform rules for electronic transactions and signatures
NIST Guidelines: Security standards and guidelines published by the National Institute of Standards and Technology
ISO/IEC 27001: International standard for information security management systems
