Computer Fraud and Abuse Act (CFAA): Federal law that prohibits accessing a computer without authorization or exceeding authorized access. Key consideration for IT service providers accessing client systems.

Electronic Communications Privacy Act (ECPA): Regulates the interception and monitoring of electronic communications. Important for IT services involving communication systems or data transmission.

Health Insurance Portability and Accountability Act (HIPAA): Governs the protection of healthcare data and patient information. Critical if IT services involve handling medical records or healthcare systems.

Gramm-Leach-Bliley Act (GLBA): Requires financial institutions to protect customers' personal financial information. Relevant when IT services involve financial data processing.

Federal Information Security Management Act (FISMA): Sets security standards for federal information systems. Essential when providing IT services to government agencies.

State Data Breach Notification Laws: Various state-specific requirements for notifying individuals affected by data breaches. Must be considered in security incident response planning.

California Consumer Privacy Act (CCPA): Comprehensive privacy law protecting California residents' personal information. Applies if handling data of California residents.

Copyright Act: Protects original works including software, code, and documentation. Important for intellectual property rights in IT services.

Electronic Signatures Act (E-SIGN): Provides legal recognition for electronic signatures and records. Relevant for contract execution and digital documentation.

PCI DSS: Payment Card Industry Data Security Standard governing payment card data security. Mandatory if handling credit card information.

Uniform Commercial Code (UCC): Standardized state laws governing commercial transactions. Relevant for contract formation and enforcement.

NIST Cybersecurity Framework: voluntary framework of computer security guidance developed by the National Institute of Standards and Technology. Provides best practices for cybersecurity.

Federal Trade Commission Act: Prohibits unfair or deceptive practices affecting commerce. Relevant for data security and privacy practices.

Sarbanes-Oxley Act (SOX): Requires proper financial disclosure and internal controls. Important when providing IT services to public companies.

GDPR Compliance: EU data protection regulation that may apply if handling data of EU residents, even for US-based services.