Computer Fraud and Abuse Act (CFAA): Federal law that addresses unauthorized access to computer systems and defines criminal penalties for various computer-related crimes
Federal Information Security Management Act (FISMA): Federal legislation that sets security standards for federal information systems and is relevant for organizations working with government data
Health Insurance Portability and Accountability Act (HIPAA): Federal healthcare privacy law that includes specific access control requirements for medical information and protected health information
Sarbanes-Oxley Act (SOX): Federal law for publicly traded companies that mandates requirements for internal controls and audit trails in information systems
Gramm-Leach-Bliley Act (GLBA): Federal law focused on protecting customer financial information with specific requirements for financial institutions
NIST Special Publication 800-53: Federal security control guidelines providing comprehensive best practices for access control and information security
ISO/IEC 27001: International standard for information security management systems including specific access control requirements and guidelines
PCI DSS: Payment Card Industry Data Security Standard that mandates specific requirements for access control when processing credit card data
State Data Breach Notification Laws: Various state-specific laws requiring notification of security breaches and including specific security requirements that vary by state
State Privacy Laws: State-specific privacy laws (such as CCPA in California and SHIELD Act in New York) with varying requirements for data protection and access control
