Last review date: 31 December 2025

• Section 5 of the Federal Trade Commission Act (FTC Act)
• FTC Health Breach Notification Rule (HBNR)
• Gramm-Leach-Bliley Act (GLBA)
• Security Rule under the Health Insurance Portability and Accountability Act (HIPAA)
• Federal Information Security Management Act (FISMA)
• Securities and Exchange Commission (SEC) Cybersecurity Rules
• Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA)
• Defense Federal Acquisition Regulation Supplement (DFARS) - Safeguarding Covered Defense Information and Cyber Incident Reporting
• Cybersecurity and Infrastructure Security Agency Act (CISAA)
• New York State Department of Financial Services Cybersecurity Requirements (NYDFS) CR and New York SHIELD Act
• Payment Card Industry Data Security Standard (PCI DSS)
• State data security and breach notification laws and CCPA regulations on cybersecurity audits