Common Compliance Requirements

HIPPA

includes security and privacy rules that affect health-care providers, health insurers, and health information clearing houses in the United States

PCI DSS

provides detailed rules about the storage, processing, and transmission of credit and debit card information. ____ is not a law but rather a contractual obligation that applies to credit card merchants and service providers worldwide

GLBA

covers U.S financial institutions, broadly defined. It requires that those institutions have a formal security program and designate an individual as having overall responsibility for that program

SOX Act

applies to the financial records of U.S publicly traded companies and requires that those companies have a strong degree of assurance for the IT systems that store and process those records

GDPR

implements security and privacy requirements for the personal information of EU residents worldwide

FERPA

requires that U.S educational institutions implement security and privacy controls for student educational records

Data breach notification laws

describe the requirements that individual states place on organizations that suffer data breaches regarding notification of individuals affected by the breach