��������Ƶ

FISMA: Federal Information Security Management Act - Sets standards for federal information systems and requires security programs, risk assessments, and continuous monitoring

ECPA: Electronic Communications Privacy Act - Governs the privacy of electronic communications and data storage, including restrictions on interception and disclosure

CFAA: Computer Fraud and Abuse Act - Addresses unauthorized access to computer systems and networks, critical for defining security breach responsibilities

GLBA: Gramm-Leach-Bliley Act - Requires financial institutions to explain their information-sharing practices and protect sensitive data

HIPAA: Health Insurance Portability and Accountability Act - Mandates protection of medical information and sets strict uptime and security requirements for healthcare data

State Data Protection Laws: Varying state-specific requirements for data protection, breach notification, and security standards that may affect SLA terms

PCI DSS: Payment Card Industry Data Security Standard - Sets requirements for organizations handling credit card information, including uptime and security standards

SOC 2: Service Organization Control 2 - Compliance framework that specifies how organizations should manage customer data based on security, availability, and confidentiality

FTC Act: Federal Trade Commission Act - Prohibits unfair or deceptive practices in commerce, including misrepresentation of service availability and performance

UCC: Uniform Commercial Code - Governs commercial transactions and contracts, providing framework for service agreements and performance standards

CCPA: California Consumer Privacy Act - Provides California residents with rights regarding their personal information and imposes obligations on businesses serving California customers

GDPR: General Data Protection Regulation - EU regulation that may apply if serving European customers, setting strict requirements for data protection and service reliability