Computer Fraud and Abuse Act (CFAA): Federal law that prohibits unauthorized access to computers and networks, crucial for defining access control violations and penalties in RBAC policies
Federal Information Security Management Act (FISMA): Federal law requiring government agencies and contractors to implement information security controls, including role-based access management
Health Insurance Portability and Accountability Act (HIPAA): Federal law governing healthcare data privacy and security, mandating strict access controls for protected health information
Gramm-Leach-Bliley Act (GLBA): Federal law requiring financial institutions to explain information-sharing practices and implement security measures to protect sensitive data
Sarbanes-Oxley Act (SOX): Federal law for publicly traded companies requiring internal controls for financial reporting, including access management and audit trails
NIST Special Publication 800-53: Federal guidelines providing security and privacy control standards, including detailed RBAC implementation guidance
NIST Cybersecurity Framework: Voluntary framework of cybersecurity standards providing guidelines for access control and identity management
ISO/IEC 27001: International standard for information security management systems, including requirements for access control and user rights management
State Data Breach Notification Laws: Various state-specific laws requiring organizations to notify individuals of security breaches involving personally identifiable information
California Consumer Privacy Act (CCPA): California state law providing consumers with rights regarding their personal data and requiring businesses to implement appropriate security measures
NY SHIELD Act: New York state law requiring businesses to implement reasonable security measures and protect private information of NY residents
Payment Card Industry Data Security Standard (PCI DSS): Security standard for organizations handling credit card information, requiring strict access controls and user authentication
Family Educational Rights and Privacy Act (FERPA): Federal law protecting the privacy of student education records, requiring specific access control measures for educational institutions
Electronic Communications Privacy Act (ECPA): Federal law protecting wire, oral, and electronic communications while those communications are being made, in transit, and when stored
