FTC Act: Federal Trade Commission Act, particularly Section 5, governing unfair or deceptive practices and establishing FTC's privacy and data security enforcement authority
HIPAA: Health Insurance Portability and Accountability Act - Federal law governing protection of medical information and health data
GLBA: Gramm-Leach-Bliley Act - Federal law governing collection, disclosure, and protection of consumers' personal financial information
COPPA: Children's Online Privacy Protection Act - Federal law imposing requirements on operators of websites or online services directed to children under 13 years of age
FCRA: Fair Credit Reporting Act - Federal law regulating the collection, dissemination, and use of consumer credit information
CCPA: California Consumer Privacy Act - Comprehensive state privacy law providing California residents with rights over their personal information
CPRA: California Privacy Rights Act - Amends and expands CCPA, introducing additional privacy rights and obligations
VCDPA: Virginia Consumer Data Protection Act - Comprehensive privacy law providing Virginia residents with data protection rights
CPA: Colorado Privacy Act - State law establishing privacy rights for Colorado residents and obligations for businesses processing their personal data
UCPA: Utah Consumer Privacy Act - State privacy law providing Utah residents with certain rights regarding their personal data
CTDPA: Connecticut Data Privacy Act - State law establishing privacy rights for Connecticut residents and requirements for businesses
GDPR: General Data Protection Regulation - EU regulation that may apply if company handles EU residents' data or has EU operations
NIST: NIST Cybersecurity Framework - Voluntary framework of computer security guidance for organizations to assess and improve their ability to prevent, detect, and respond to cyber attacks
ISO 27001: International standard for information security management systems (ISMS), providing requirements for establishing, implementing, maintaining and continually improving an ISMS
SOC 2: Service Organization Control 2 - Audit protocol defining criteria for managing customer data based on five trust service principles
State Data Breach Laws: Various state-specific laws requiring notification of security breaches involving personal information, with different requirements per state
