GLBA (Gramm-Leach-Bliley Act): Federal law that requires financial institutions to protect customer financial data and explain their information-sharing practices

HIPAA (Health Insurance Portability and Accountability Act): Federal law governing the protection and handling of protected health information (PHI)

COPPA (Children's Online Privacy Protection Act): Federal law that imposes requirements on operators of websites or online services directed to children under 13 years of age

FISMA (Federal Information Security Management Act): Federal law that defines a comprehensive framework to protect government information, operations, and assets against natural or human threats

CISA (Cybersecurity Information Sharing Act): Federal law that promotes the sharing of cybersecurity threat information between private sector and government

FTC Act: Federal law prohibiting unfair or deceptive practices affecting commerce, including data security and privacy practices

ECPA (Electronic Communications Privacy Act): Federal law that extends restrictions on government surveillance of telephone calls to electronic data transmissions

SOX (Sarbanes-Oxley Act): Federal law establishing requirements for financial reporting and corporate accountability

PCI DSS: Industry standard for organizations that handle credit card information to ensure secure payment processing environment

CCPA (California Consumer Privacy Act): California state law providing privacy rights and consumer protection for California residents

VCDPA (Virginia Consumer Data Protection Act): Virginia state law establishing framework for controlling and processing personal data of Virginia residents

Colorado Privacy Act: Colorado state law providing privacy rights and protections for Colorado residents

State Data Breach Notification Laws: Various state-specific laws requiring notification of affected individuals in case of data breaches

GDPR Compliance: European Union regulation consideration if handling EU resident data, including data transfer mechanisms

EU-US Data Privacy Framework: Framework governing transatlantic data flows between the EU and US