GLBA: Gramm-Leach-Bliley Act - Federal law governing the protection of personal financial information by financial institutions
HIPAA: Health Insurance Portability and Accountability Act - Federal law protecting sensitive patient health information from being disclosed without consent
COPPA: Children's Online Privacy Protection Act - Federal law imposing requirements on operators of websites or online services directed to children under 13 years of age
FCRA: Fair Credit Reporting Act - Federal law regulating the collection, dissemination, and use of consumer credit information
FTC Act: Federal Trade Commission Act - Federal law providing broad consumer protection and prohibiting unfair or deceptive practices in privacy and data security
CCPA/CPRA: California Consumer Privacy Act/California Privacy Rights Act - California state laws providing consumers with rights regarding their personal information
VCDPA: Virginia Consumer Data Protection Act - Virginia state law establishing framework for controlling and processing personal data
CPA: Colorado Privacy Act - Colorado state law providing residents with privacy rights and imposing obligations on data controllers
CTDPA: Connecticut Data Privacy Act - Connecticut state law establishing consumer privacy rights and business obligations
UCPA: Utah Consumer Privacy Act - Utah state law providing framework for consumer privacy rights and business responsibilities
GDPR: General Data Protection Regulation - EU regulation that may apply when handling data of EU residents, even for US companies
PIPEDA: Personal Information Protection and Electronic Documents Act - Canadian federal privacy law that may apply when handling Canadian resident data
PCI DSS: Payment Card Industry Data Security Standard - Security standard for organizations that handle branded credit cards
SOC 2: Service Organization Control 2 - Voluntary compliance standard for service organizations, specifying how organizations should manage customer data
ISO 27001: International Organization for Standardization standard for information security management systems (ISMS)
