CSO's ultimate guide to security and privacy laws, regulations, and compliance

CSO's ultimate guide to security and privacy laws, regulations, and compliance

CSO's ultimate guide to security and privacy laws, regulations, and compliance

Security and privacy laws, regulations, and compliance: The complete guide



This directory includes laws, regulations and industry guidelines with significant security and privacy impact and requirements. Each entry includes a link to the full text of the law or reg as well as information about what and who is covered.

Click on a link to skip to information and resources on that law:


Broadly applicable laws and regulations


Sarbanes-Oxley Act (SOX)
Payment Card Industry Data Security Standard (PCI DSS)
Payment Service Directive, revised (PSD2)
Gramm-Leach-Bliley Act (GLB) Act
Customs-Trade Partnership Against Terrorism (C-TPAT)
Free and Secure Trade Program (FAST)
Children's Online Privacy Protection Act (COPPA)
Fair and Accurate Credit Transaction Act (FACTA), including Red Flags Rule
Federal Rules of Civil Procedure (FRCP)

Industry-specific guidelines and requirements


Federal Information Security Management Act (FISMA)
North American Electric Reliability Corp. (NERC) standards
Title 21 of the Code of Federal Regulations (21 CFR Part 11) Electronic Records
ultimate guide security privacy regulations compliance