Computer Fraud and Abuse Act (CFAA): Federal law that prohibits accessing a computer without authorization or exceeding authorized access. Essential for defining security responsibilities and unauthorized access prevention in IT services.
Electronic Communications Privacy Act (ECPA): Extends government restrictions on wire taps to include transmitted electronic data. Important for data privacy and electronic communications handling in IT services.
Gramm-Leach-Bliley Act: Requires financial institutions to explain their information-sharing practices and protect sensitive data. Relevant when handling financial data.
Health Insurance Portability and Accountability Act (HIPAA): Provides data privacy and security provisions for safeguarding medical information. Must be considered when handling healthcare data.
Federal Information Security Management Act (FISMA): Defines framework for protecting government information, operations and assets against threats. Essential for government-related IT services.
Sarbanes-Oxley Act (SOX): Requires proper internal control structures and assessment procedures for financial reporting. Important when providing IT services to public companies.
State Data Breach Notification Laws: Various state-specific requirements for notifying individuals of security breaches of personally identifiable information. Must be incorporated into incident response procedures.
California Consumer Privacy Act (CCPA): Enhances privacy rights and consumer protection for residents of California. Must be considered when handling data of California residents.
General Data Protection Regulation (GDPR): EU data protection regulation that may apply when handling data of EU residents, even for US-based services.
Payment Card Industry Data Security Standard (PCI DSS): Security standards for organizations that handle credit card information. Must be complied with if processing payment card data.
Uniform Commercial Code (UCC): Standardized set of business laws regulating commercial transactions. Relevant for contract formation and enforcement.
Electronic Signatures in Global and National Commerce Act (ESIGN): Facilitates the use of electronic records and signatures in interstate and foreign commerce. Important for contract execution.
Copyright Act: Protects original works of authorship including software and documentation. Essential for intellectual property provisions in IT services.
Trade Secrets Protection: Laws protecting confidential business information that provides competitive advantage. Important for confidentiality provisions.
Fair Labor Standards Act: Federal law establishing standards for wage and overtime pay. Relevant when discussing service delivery and staff arrangements.
Federal Trade Commission Act: Prohibits unfair or deceptive practices in commerce. Important for service level agreements and marketing claims.
NIST Cybersecurity Framework: Voluntary guidance for private sector organizations to better manage and reduce cybersecurity risk. Important for defining security standards and practices.
