Federal Acquisition Regulation (FAR): Primary regulation for federal government procurement. Must be considered if the RFP involves federal contracts or agencies.
HIPAA: Health Insurance Portability and Accountability Act - Critical for IT systems handling healthcare data or personal health information.
GLBA: Gramm-Leach-Bliley Act - Required for IT systems handling financial data and customer financial information.
FISMA: Federal Information Security Management Act - Establishes information security standards for federal information systems.
ADA: Americans with Disabilities Act - Ensures IT systems and solutions meet accessibility requirements for users with disabilities.
FTC Act: Federal Trade Commission Act - Governs data security and privacy practices in commercial contexts.
State Data Breach Laws: Various state-specific regulations requiring notification and protective measures in case of data breaches.
State Privacy Laws: State-specific privacy regulations (e.g., CCPA in California, SHIELD Act in NY) affecting data handling and protection.
NIST Cybersecurity Framework: Standards and guidelines for managing and reducing cybersecurity risk in IT systems.
ISO/IEC 27001: International standard for information security management systems and related requirements.
PCI DSS: Payment Card Industry Data Security Standard - Required for systems handling credit card data.
SOX Compliance: Sarbanes-Oxley Act requirements for IT systems in publicly traded companies, focusing on financial controls and reporting.
GDPR Considerations: European Union's General Data Protection Regulation - Must be considered if handling EU resident data.
Export Control Regulations: Regulations governing the export of technology and technical data to foreign countries.
Fair Labor Standards Act: Federal law establishing standards for employment that may affect IT service provisions and staffing requirements.
