HIPAA: Health Insurance Portability and Accountability Act - Federal law that protects sensitive patient health information from being disclosed without consent
GLBA: Gramm-Leach-Bliley Act - Federal law requiring financial institutions to explain their information-sharing practices and protect sensitive data
FISMA: Federal Information Security Management Act - Defines framework for protecting government information, operations and assets against threats
SOX: Sarbanes-Oxley Act - Mandates strict requirements for financial reporting and data integrity in public companies
FTC Act: Federal Trade Commission Act - Prohibits unfair or deceptive practices in data handling and privacy
CCPA: California Consumer Privacy Act - Provides California residents with rights regarding their personal information and imposes obligations on businesses
VCDPA: Virginia Consumer Data Protection Act - Provides Virginia residents with rights over their personal data and regulates data processing
Colorado Privacy Act: State law providing Colorado residents with privacy rights and imposing obligations on data controllers and processors
NIST Cybersecurity Framework: Voluntary framework of computer security guidance for organizations to assess and improve their ability to prevent, detect, and respond to cyber attacks
ISO 27001: International standard for information security management systems (ISMS), providing requirements for establishing, implementing, and maintaining an ISMS
PCI DSS: Payment Card Industry Data Security Standard - Security standard for organizations that handle branded credit cards from major card schemes
UCC: Uniform Commercial Code - Harmonizes state laws regarding sales and commercial transactions across the United States
E-SIGN Act: Electronic Signatures in Global and National Commerce Act - Facilitates the use of electronic records and signatures in interstate and foreign commerce
GDPR Compliance Requirements: European Union's General Data Protection Regulation requirements that may apply to US companies handling EU resident data
Privacy Shield Framework: Framework for regulating transatlantic exchanges of personal data for commercial purposes between the EU and US
Standard Contractual Clauses: Standardized contractual terms approved by the European Commission for international data transfers
