Sarbanes-Oxley Act (SOX): Federal law requiring maintenance of audit trails and specific data integrity and retention requirements for corporate financial records and IT systems
Federal Information Security Management Act (FISMA): Federal law establishing security logging requirements for federal agencies and their contractors, including comprehensive incident reporting requirements
Health Insurance Portability and Accountability Act (HIPAA): Healthcare-specific federal law mandating audit logging requirements and access logging for protected health information (PHI)
Gramm-Leach-Bliley Act (GLBA): Federal law specifying logging requirements for financial institutions, including security event monitoring and access controls
Payment Card Industry Data Security Standard (PCI DSS): Industry standard establishing specific logging requirements for payment card data processing and retention
NIST Special Publication 800-53: Federal guidelines providing comprehensive framework for security logging, log management, and security controls
State Data Breach Notification Laws: Various state-level requirements for logging security incidents and maintaining breach-related documentation with state-specific retention periods
State Privacy Laws (CCPA, SHIELD Act): State-specific requirements for logging personal data access and privacy-related events, varying by jurisdiction
General Data Protection Regulation (GDPR): EU regulation with specific logging requirements for data access and processing when handling EU residents' data
Industry-Specific Regulations: Sector-specific logging requirements varying by industry (e.g., energy, telecommunications, healthcare) with unique compliance needs
