Federal Rules of Civil Procedure (FRCP): Key federal rules governing civil litigation procedures, particularly Rule 37(e) which addresses electronically stored information and its preservation requirements
Sarbanes-Oxley Act (SOX): Federal law mandating specific financial records retention requirements and internal control assessments for public companies
Health Insurance Portability and Accountability Act (HIPAA): Federal regulation governing the protection and retention of medical and healthcare data, requiring specific backup and security protocols
Gramm-Leach-Bliley Act (GLBA): Federal law requiring financial institutions to explain their information-sharing practices and protect sensitive data
Federal Information Security Management Act (FISMA): Legislation that defines cybersecurity framework for federal agencies and contractors, including data backup requirements
Federal Records Act: Law governing the management of federal records, including requirements for preservation and backup of government documents
Payment Card Industry Data Security Standard (PCI DSS): Industry security standard for organizations handling credit card information, including specific backup and retention requirements
Family Educational Rights and Privacy Act (FERPA): Federal law protecting the privacy of student education records, including requirements for secure backup and retention
SEC Rule 17a-4: Securities and Exchange Commission rule specifying retention requirements for securities firms, including electronic storage media requirements
State Data Breach Notification Laws: Various state-specific requirements for notifying individuals of data breaches and maintaining adequate backup procedures
California Consumer Privacy Act (CCPA): California's comprehensive privacy law that includes specific requirements for data retention and consumer rights regarding their personal information
General Data Protection Regulation (GDPR): EU regulation with potential impact on US companies handling EU residents' data, including specific backup and retention requirements
NIST Special Publication 800-53: Security and privacy controls framework providing guidelines for information systems, including backup and retention standards
ISO 27001: International standard for information security management systems, providing framework for data backup and retention practices
COBIT Framework: IT governance framework that includes guidelines for data backup, retention, and information system control objectives
