Federal Information Security Management Act (FISMA): Federal law that defines a comprehensive framework to protect government information, operations and assets against natural or man-made threats. Must be considered when SLA involves federal agencies.
Health Insurance Portability and Accountability Act (HIPAA): Regulatory framework for protecting sensitive patient health information. Critical for SLAs involving healthcare data processing or storage.
Gramm-Leach-Bliley Act (GLBA): Federal law requiring financial institutions to explain their information-sharing practices and protect sensitive data. Essential for SLAs in financial services.
Federal Trade Commission Act: Prohibits unfair or deceptive practices in commerce. Affects how service levels and guarantees are presented in SLAs.
Computer Fraud and Abuse Act: Federal cybercrime law addressing computer-related fraud and unauthorized access. Influences security provisions in SLAs.
California Consumer Privacy Act (CCPA): State law providing California residents with data privacy rights. Must be addressed in SLAs involving California resident data.
Uniform Commercial Code (UCC): Standardized set of laws governing commercial transactions. Provides framework for contract formation and enforcement.
Payment Card Industry Data Security Standard (PCI DSS): Security standards for organizations handling credit card information. Mandatory for SLAs involving payment processing.
Sarbanes-Oxley Act (SOX): Federal law setting requirements for public company boards and management regarding financial reporting. Relevant for SLAs with public companies.
Copyright Act: Federal law protecting original works of authorship. Important for SLAs involving software, content, or intellectual property.
State Data Privacy Laws: Various state-specific regulations governing data privacy and protection. Must be considered based on the geographical scope of services.
Magnuson-Moss Warranty Act: Federal law governing consumer product warranties. Applicable when SLA includes warranty terms for consumer services.
Statute of Frauds: Legal requirement that certain contracts must be in writing to be enforceable. Affects SLA documentation requirements.
Force Majeure Regulations: Legal principles governing unforeseeable circumstances preventing contract fulfillment. Essential for SLA risk allocation.
State Liability Laws: State-specific regulations governing liability and limitations thereof. Crucial for SLA risk management provisions.
