HIPAA: Health Insurance Portability and Accountability Act - Federal law governing the protection and handling of healthcare data, including backup and recovery requirements for protected health information (PHI)
GLBA: Gramm-Leach-Bliley Act - Federal regulation requiring financial institutions to protect customers' personal financial information and explain their data-sharing practices
SOX: Sarbanes-Oxley Act - Federal law requiring public companies to maintain accurate financial records and implement adequate internal controls for data backup and recovery
FISMA: Federal Information Security Management Act - Legislation that defines cybersecurity framework for federal agencies, including data backup and disaster recovery requirements
FERPA: Family Educational Rights and Privacy Act - Federal law protecting the privacy of student education records, including requirements for secure backup and recovery of educational data
State Data Breach Laws: Various state-specific regulations requiring organizations to notify individuals of security breaches involving personally identifiable information
CCPA: California Consumer Privacy Act - Comprehensive state-level privacy law giving California residents rights over their personal data, including how it's stored and protected
PCI DSS: Payment Card Industry Data Security Standard - Security standard for organizations handling credit card data, including specific requirements for backup and recovery
NIST SP 800-53: National Institute of Standards and Technology Special Publication - Federal information systems security controls framework, including guidance for backup and recovery
ISO 27001: International Organization for Standardization standard for information security management systems, including requirements for data backup and recovery procedures
SEC Requirements: Securities and Exchange Commission regulations governing financial institutions' data management, including requirements for business continuity and disaster recovery
FTC Requirements: Federal Trade Commission requirements for protecting consumer data and maintaining adequate security measures, including backup and recovery protocols
GDPR: General Data Protection Regulation - EU regulation with extraterritorial scope affecting US companies handling EU residents' data, including requirements for data protection and recovery
