List of Regulatory Compliances in US Centric World
Electronic Communications Privacy Act regulates the monitoring of online information unless specific legal directives make exceptions.
Computer Fraud and Abuse Act of 1986, 18 U.S.C. 1001, established felony penalties for breaking into federal interest computer systems and penalties for illegally obtained computer password trafficking. Essentially this law clarified that unauthorized computer entry was considered illegal. In the early 1980s, entry into U.S. federal computer systems was not considered illegal.
Healthcare Insurance Portability and Accountability Act (HIPAA) provides guidance on how confidential patient information can be treated and accessed.
E-sign Laws have become a necessity because several federal and state laws in the United States and in many other countries now grant digital forms of transactions the same power as verbal or written contracts (depending on the country). This provides for a powerful need to validate and trust online senders of documents and other materials.
Children's Online Privacy Protection Act (COPPA) specifies practices for Web sites that cater to children age 13 and under. This is important for retail and toy sites that may try to attract children in the hopes of having them influence their parents to choose one product over another.
Children's Online Protection Act (COPA) essentially provides restrictions for Web sites that require parental involvement and control to authorize either site access or some site transactions. This ensures that the child did not stumble across harmful or dangerous information or activities without the parentsf consent. Note that COPA is under judicial review because the ACLU (American Civil Liberties Union) has brought the U.S. government to court on the legality of enforcing the law. A final decision has not yet been reached (it was sent to a lower court by the U.S. Supreme Court without judgment in May 2002).
Financial Services Modernization Act (Gramm-Leach-Bliley Act) requires clear disclosure of financial institutionsf privacy statements, including how private information is used with affiliates and third parties. The law requires opt-out ability, which allows consumers the right not to have their information shared or sold to unknown parties
[PKI security solutions for enterprise, Kapil Raina]
