Bank Secrecy Act (BSA): Federal law requiring financial institutions to assist government agencies in detecting and preventing money laundering. Must be considered for compliance requirements in SLA.
Gramm-Leach-Bliley Act (GLBA): Federal law that requires financial institutions to explain their information-sharing practices and protect sensitive data. Critical for privacy provisions in SLA.
Dodd-Frank Wall Street Reform: Comprehensive financial reform legislation that affects banking operations, consumer protection, and risk management requirements.
California Consumer Privacy Act (CCPA): State-specific privacy law that may apply if serving California residents, requiring specific data protection and consumer rights provisions.
Consumer Financial Protection Bureau (CFPB) regulations: Federal consumer protection rules that must be reflected in service delivery and customer interaction requirements.
Fair Credit Reporting Act (FCRA): Federal law governing the collection, dissemination, and use of consumer credit information.
Electronic Fund Transfer Act (EFTA): Federal law establishing rights, liabilities, and responsibilities of participants in electronic fund transfer systems.
FFIEC Guidelines: Federal Financial Institutions Examination Council guidelines for information security and technology risk management.
PCI DSS: Payment Card Industry Data Security Standard requirements for handling credit card data and transactions.
Uniform Commercial Code (UCC): State-adopted uniform laws governing commercial transactions, including banking operations.
FDIC Requirements: Federal Deposit Insurance Corporation regulations for insured banks, including operational and risk management requirements.
OCC Third-Party Relationship Guidelines: Office of the Comptroller of the Currency guidelines for managing vendor relationships and outsourcing risks.
E-SIGN Act: Electronic Signatures in Global and National Commerce Act governing the validity of electronic signatures and records.
UETA: Uniform Electronic Transactions Act providing legal framework for electronic transactions and signatures at state level.
NIST Cybersecurity Framework: National Institute of Standards and Technology guidelines for managing and reducing cybersecurity risk.
