HIPAA: Health Insurance Portability and Accountability Act - Mandates the protection and secure backup of healthcare data, including specific requirements for data retention and recovery procedures
GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to implement comprehensive data backup and security measures to protect customers' financial information
SOX: Sarbanes-Oxley Act - Mandates strict data retention and recovery requirements for public companies' financial records and related information
FISMA: Federal Information Security Management Act - Sets security standards for federal agencies' information systems, including backup and recovery requirements
FERPA: Family Educational Rights and Privacy Act - Requires educational institutions to maintain secure backups of student records and ensure their recoverability
CCPA: California Consumer Privacy Act - State-specific requirements for protecting and maintaining California residents' personal data, including backup considerations
SHIELD Act: New York's Stop Hacks and Improve Electronic Data Security Act - Requires businesses to implement data security programs, including proper backup and recovery measures
MA 201 CMR 17.00: Massachusetts data protection regulation requiring comprehensive information security programs, including specific backup and recovery requirements
PCI DSS: Payment Card Industry Data Security Standard - Specifies requirements for securing and backing up payment card data and related information
NIST SP 800-53: National Institute of Standards and Technology Special Publication - Provides detailed guidelines for information security controls, including backup and recovery procedures
ISO 27001: International Standard for Information Security Management - Provides framework for managing sensitive company information, including backup and recovery requirements
FRCP: Federal Rules of Civil Procedure - Contains requirements for electronic discovery and data preservation that affect backup retention policies
GDPR: General Data Protection Regulation - EU regulation that impacts organizations handling European residents' data, including specific backup and recovery requirements
State Breach Laws: Various state-specific data breach notification laws requiring proper backup and recovery procedures to ensure data availability and protection
