Gramm-Leach-Bliley Act (GLBA): Federal law that requires financial institutions to explain their information-sharing practices to customers and protect sensitive customer data. Includes financial privacy rules and safeguarding requirements for customer information.

Electronic Funds Transfer Act (EFTA) and Regulation E: Federal regulation governing electronic fund transfers, establishing consumer rights, error resolution procedures, and liability limits for unauthorized transactions.

Federal Trade Commission Act: Federal law addressing unfair or deceptive practices in commerce and establishing data security requirements for financial institutions.

Bank Secrecy Act (BSA): Federal law requiring financial institutions to assist government agencies in detecting and preventing money laundering, including customer identification requirements.

Federal Deposit Insurance Act: Federal law establishing FDIC insurance coverage and basic requirements for banking operations and security.

State Data Breach Notification Laws: State-specific regulations requiring financial institutions to notify customers of data breaches and take specific actions in response to security incidents.

State Consumer Protection Laws: State-specific regulations protecting consumers' rights in financial transactions and establishing security requirements for financial institutions.

State Banking Regulations: State-specific rules governing banking operations, security measures, and customer protection within the state's jurisdiction.

State Electronic Transaction Laws: State-specific laws governing electronic transactions and establishing security requirements for online banking services.

FFIEC Authentication Guidance: Regulatory guidelines establishing requirements for authentication, layered security, and other controls for electronic banking activities.

NIST Cybersecurity Framework: Voluntary framework providing standards, guidelines, and best practices for managing cybersecurity risk in financial institutions.

PCI DSS Standards: Payment Card Industry Data Security Standards establishing requirements for securing payment card data in electronic transactions.