FISMA: Federal Information Security Management Act - Sets security standards for federal information systems and applies to government cloud services
HIPAA: Health Insurance Portability and Accountability Act - Establishes privacy and security requirements for protected health information in cloud services handling healthcare data
GLBA: Gramm-Leach-Bliley Act - Specifies requirements for financial data protection when handling financial information in cloud services
FTC Act Section 5: Federal Trade Commission Act Section 5 - Addresses unfair or deceptive practices and establishes data security and privacy requirements
SCA: Stored Communications Act - Part of Electronic Communications Privacy Act governing stored electronic communications in cloud services
PCI DSS: Payment Card Industry Data Security Standard - Mandates security standards for payment processing and handling payment card data
FERPA: Family Educational Rights and Privacy Act - Establishes privacy requirements for student data and educational records
State Breach Laws: State-specific Data Breach Notification Laws - Various requirements across all 50 states regarding notification obligations in case of data breaches
CCPA/CPRA: California Consumer Privacy Act/California Privacy Rights Act - Comprehensive privacy requirements for services handling California residents' data
NY SHIELD Act: New York Stop Hacks and Improve Electronic Data Security Act - Example of state-specific cybersecurity requirements for data protection
GDPR Considerations: General Data Protection Regulation considerations if handling EU resident data, even for US-based cloud services
ISO 27001: International standard for information security management systems, providing framework for cloud service security controls
SOC 2: Service Organization Control 2 - Compliance framework for managing customer data based on security, availability, processing integrity, confidentiality, and privacy
NIST Framework: National Institute of Standards and Technology cybersecurity framework providing standards and guidelines for cloud service security
