United States
-
Gramm-Leach-Bliley Act (GLBA): Ensuring financial institutions protect the security and confidentiality of customer data.
-
California Consumer Privacy Act (CCPA): Providing consumers with rights regarding the collection and use of their personal information.
-
Colorado Privacy Act (CPA): Similar to CCPA, focusing on data privacy and protection.
-
Computer Fraud and Abuse Act (CFAA): Addresses hacking and unauthorized access to computers.
-
Health Insurance Portability and Accountability Act (HIPAA): Protects patient health information.
-
Federal Information Security Modernization Act (FISMA): Requires government agencies to develop methods to protect their information systems.
-
Payment Card Industry Data Security Standard (PCI DSS): Sets standards for companies processing, storing, or transmitting cardholder data.
-
New York Department of Financial Services (NYDFS) Cybersecurity Regulation: Focuses on cybersecurity for financial services companies.
European Union (EU)
-
NIS2 Directive: Strengthening cybersecurity resilience and harmonizing regulations across the EU, particularly around critical infrastructure.
-
GDPR (General Data Protection Regulation): Protecting personal data and privacy for individuals within the EU.
Asia
-
Personal Information Protection Act (PIPA): South Korea’s data protection law ensuring the safe handling of personal information.
-
Cybersecurity Law: China’s comprehensive law focusing on cybersecurity and data protection.
International
-
ISO/IEC 27001: An international standard for managing information security.
-
NIST Cybersecurity Framework: A voluntary framework in the US that provides guidelines on how to manage and reduce cybersecurity risk.