Sarbanes-Oxley Act (SOX): Federal legislation governing financial records retention requirements, particularly for publicly traded companies. Requires strict controls over financial records and related documentation.
HIPAA: Healthcare data privacy and security regulation requiring specific backup and retention policies for protected health information (PHI), including minimum retention periods of 6 years.
Gramm-Leach-Bliley Act (GLBA): Federal law requiring financial institutions to explain their information-sharing practices and protect sensitive customer data with specific retention requirements.
Federal Rules of Civil Procedure (FRCP): Federal rules governing electronic discovery requirements, including the obligation to preserve and produce electronically stored information (ESI) in legal proceedings.
Fair Labor Standards Act (FLSA): Federal labor law requiring retention of employee records, payroll data, and related employment documentation for specific periods.
FERPA: Federal law protecting student education records privacy, including specific requirements for educational institutions regarding data retention and disposal.
PCI DSS: Security standard for organizations handling credit card data, including specific requirements for backup retention and secure disposal of cardholder data.
DFARS: Defense acquisition regulations including specific requirements for contractors regarding data backup, retention, and security of defense-related information.
State Data Breach Laws: Various state-specific requirements for data breach notification and documentation retention related to security incidents and personal information protection.
CCPA: California's privacy law with specific requirements for businesses handling California residents' personal information, including data retention limitations.
GDPR Compliance: EU privacy regulation affecting US companies handling EU residents' data, including specific requirements for data minimization and retention limitations.
IRS Requirements: Federal tax record retention requirements, generally mandating a 7-year retention period for tax-related documentation and supporting records.
NIST Guidelines: Federal technology standards providing framework for data security, including backup and retention best practices for organizational data.
ISO 27001: International standard for information security management systems, providing requirements and best practices for data backup and retention procedures.
