FISMA: Federal Information Security Management Act - Sets security standards for federal information systems and requires security programs, security controls, and security assessments

GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive customer data

HIPAA: Health Insurance Portability and Accountability Act - Establishes national standards for electronic healthcare transactions and security measures for health information

SOX: Sarbanes-Oxley Act - Mandates proper financial disclosure and corporate accountability, including IT controls and data security measures

CFAA: Computer Fraud and Abuse Act - Addresses computer-related crimes and unauthorized access to protected systems

ECPA: Electronic Communications Privacy Act - Regulates the interception and monitoring of electronic communications

FTC Act: Federal Trade Commission Act - Enforces against unfair or deceptive practices, including inadequate data security measures

State Breach Laws: Various state-specific laws requiring notification of data breaches and specific security measures

CCPA/SHIELD: State-specific privacy laws like California Consumer Privacy Act and New York's SHIELD Act that impose specific data protection requirements

NIST Framework: National Institute of Standards and Technology Cybersecurity Framework - Voluntary guidelines for managing cybersecurity risks

ISO 27001: International standard for information security management systems, providing requirements for establishing and maintaining security controls

PCI DSS: Payment Card Industry Data Security Standard - Security standards for organizations handling credit card information

SOC 2: Service Organization Control 2 - Compliance framework for service organizations to ensure secure data management

UCC: Uniform Commercial Code - Governs commercial transactions and contracts across states

State Contract Laws: State-specific contract laws that may affect the enforceability and interpretation of SLA terms

Liability Framework: Legal framework governing liability limitations, indemnification requirements, and risk allocation in service agreements