FTC Act: Federal Trade Commission Act, particularly Section 5 regarding unfair or deceptive practices in data handling and privacy
GLBA: Gramm-Leach-Bliley Act - Federal law governing the collection, use, and protection of financial data
HIPAA: Health Insurance Portability and Accountability Act - Federal law governing the protection of healthcare data
CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act - Comprehensive state privacy laws providing California residents with data rights
VCDPA: Virginia Consumer Data Protection Act - State privacy law providing Virginia residents with data protection rights
CPA: Colorado Privacy Act - State privacy law establishing requirements for data protection and consumer rights in Colorado
UCPA: Utah Consumer Privacy Act - State privacy law establishing data protection requirements for Utah residents
GDPR Considerations: General Data Protection Regulation requirements if EU data subjects are involved in data processing activities
UK GDPR Considerations: UK General Data Protection Regulation requirements if UK data subjects are involved in data processing activities
PCI DSS: Payment Card Industry Data Security Standard - Security requirements for organizations handling credit card data
FERPA: Family Educational Rights and Privacy Act - Federal law protecting the privacy of student education records
Data Transfer Mechanisms: Requirements for legally compliant transfer of personal data between jurisdictions
Security Measures: Technical and organizational measures required to ensure appropriate security of personal data
Breach Notification: Requirements for timing and content of data breach notifications to affected parties and regulators
Data Subject Rights: Procedures for handling data subject requests including access, deletion, and portability rights
Subprocessor Requirements: Obligations regarding the appointment and oversight of subprocessors handling personal data
Audit Rights: Provisions for conducting audits and assessments of data processing activities
Data Retention: Requirements for retention periods and secure deletion of personal data
