Uniform Commercial Code (UCC): Federal law governing commercial transactions, particularly Article 2 for sale of goods. Essential for establishing basic contract terms and obligations.
Federal Acquisition Regulation (FAR): Comprehensive set of rules governing federal government procurement processes and contracts. Relevant if the vendor agreement involves government contracts.
Sarbanes-Oxley Act (SOX): Federal law establishing requirements for financial reporting and internal controls in business operations. Important for vendor relationships affecting financial reporting.
HIPAA: Health Insurance Portability and Accountability Act governing protection of medical information. Required if vendor handles healthcare data.
Gramm-Leach-Bliley Act (GLBA): Federal law requiring financial institutions to explain information-sharing practices and protect sensitive data. Applicable if financial data is involved.
State Contract Laws: Varying state-specific regulations governing contract formation, enforcement, and interpretation. Must be considered based on jurisdiction.
PCI DSS: Payment Card Industry Data Security Standard setting requirements for organizations handling credit card information. Mandatory if vendor processes payment data.
Copyright Act: Federal law protecting original works of authorship. Essential for addressing intellectual property rights in vendor relationships.
Trade Secrets Protection: Laws protecting confidential business information that provides competitive advantage. Critical for protecting proprietary information shared with vendors.
Fair Labor Standards Act: Federal law establishing wage, overtime, and youth employment standards. Relevant if vendor agreement involves staffing or labor provisions.
State Data Breach Laws: State-specific requirements for handling and reporting data breaches. Must be addressed if vendor handles sensitive data.
Environmental Protection Agency Requirements: Federal regulations governing environmental impact and compliance. Necessary if vendor services involve environmental considerations.
State Cybersecurity Laws: State-specific requirements for data protection and cybersecurity measures. Important for vendors with access to systems or data.
Worker's Compensation Laws: State-specific insurance requirements for workplace injuries. Relevant if vendor personnel work on-site or in conjunction with company employees.
Federal Trade Commission Act: Federal law prohibiting unfair or deceptive practices in commerce. Provides framework for fair business practices in vendor relationships.
