Sarbanes-Oxley Act (SOX): Federal law requiring internal controls for financial systems access, applicable to publicly traded companies. Mandates regular review of access rights to financial systems and data.
Health Insurance Portability and Accountability Act (HIPAA): Federal healthcare privacy law requiring strict access controls and regular reviews for systems containing protected health information (PHI).
Gramm-Leach-Bliley Act (GLBA): Federal law requiring financial institutions to implement comprehensive information security programs, including access control measures.
Federal Information Security Management Act (FISMA): Federal law establishing information security requirements for federal agencies and their contractors, including access control and review procedures.
Family Educational Rights and Privacy Act (FERPA): Federal law protecting the privacy of student education records, requiring controlled access and regular review of access rights to educational data.
Payment Card Industry Data Security Standard (PCI DSS): Industry security standard for organizations handling credit card information, requiring strict access control measures and regular access reviews.
NIST Special Publication 800-53: Federal information systems security standards providing guidelines for access control and review procedures.
ISO 27001: International standard for information security management systems, including requirements for access control and regular access reviews.
California Consumer Privacy Act (CCPA): State law providing California residents with data privacy rights and requiring businesses to implement appropriate access controls.
New York SHIELD Act: State law requiring businesses to implement reasonable security measures, including access controls and regular reviews.
General Data Protection Regulation (GDPR): EU privacy regulation with extraterritorial effect, requiring strict access controls and regular reviews for systems containing EU residents' data.
California Privacy Rights Act (CPRA): Enhanced privacy law expanding CCPA requirements, including stronger access control and review requirements for California residents' data.
Americans with Disabilities Act (ADA): Federal civil rights law requiring consideration of accessibility requirements in access control systems and review procedures.
EEOC Requirements: Federal employment regulations requiring non-discriminatory access control practices and equal opportunity considerations in system access.
