FISMA: Federal Information Security Management Act - Provides a framework for protecting government information and operations against natural or man-made threats
HIPAA: Health Insurance Portability and Accountability Act - Regulates the use and disclosure of protected health information in cloud services
GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive data
FTC Act: Federal Trade Commission Act - Prohibits unfair or deceptive practices in commerce, including cloud service representations
CLOUD Act: Clarifying Lawful Overseas Use of Data Act - Governs how US cloud providers must handle data requests from foreign governments
CCPA: California Consumer Privacy Act - Provides California residents with rights regarding their personal information in cloud services
SHIELD Act: New York's Stop Hacks and Improve Electronic Data Security Act - Requires businesses to implement safeguards for NY residents' private information
State Breach Laws: Various state-specific requirements for notifying individuals and authorities in case of data breaches in cloud services
NIST Framework: National Institute of Standards and Technology cybersecurity framework providing guidelines for cloud security implementation
ISO 27001: International standard for information security management systems, crucial for cloud service providers
SOC 2: Service Organization Control 2 - Compliance framework for managing customer data based on security, availability, processing integrity, confidentiality, and privacy
GDPR: General Data Protection Regulation - EU regulation that affects US cloud providers handling European residents' data
