[Cisspstudy] List of Regulatory Compliances (US Centric World)

[Prakash]

Electronic
Communications Privacy Act regulates the monitoring of online
information unless specific legal directives make exceptions.



Computer Fraud
and Abuse Act of 1986, 18 U.S.C. 1001, established felony penalties for
breaking into federal interest computer systems and penalties for
illegally obtained computer password trafficking. Essentially this law
clarified that unauthorized computer entry was considered illegal. In
the early 1980s, entry into U.S. federal computer systems was not
considered illegal.



Healthcare
Insurance Portability and Accountability Act (HIPAA) provides guidance
on how confidential patient information can be treated and accessed.



E-sign Laws
have become a necessity because several federal and state laws in the
United States and in many other countries now grant digital forms of
transactions the same power as verbal or written contracts (depending
on the country). This provides for a powerful need to validate and
trust online senders of documents and other materials.



Children's
Online Privacy Protection Act (COPPA) specifies practices for Web sites
that cater to children age 13 and under. This is important for retail
and toy sites that may try to attract children in the hopes of having
them influence their parents to choose one product over another.



Children's
Online Protection Act (COPA) essentially provides restrictions for Web
sites that require parental involvement and control to authorize either
site access or some site transactions. This ensures that the child did
not stumble across harmful or dangerous information or activities
without the parents of consent. Note that COPA is under judicial review
because the ACLU (American Civil Liberties Union) has brought the U.S.
government to court on the legality of enforcing the law. A final
decision has not yet been reached (it was sent to a lower court by the
U.S. Supreme Court without judgment in May 2002).



Financial
Services Modernization Act (Gramm-Leach-Bliley Act) requires clear
disclosure of financial institutions of privacy statements, including
how private information is used with affiliates and third parties. The
law requires opt-out ability, which allows consumers the right not to
have their information shared or sold to unknown parties



- Prakash

http://www.linkedin.com/in/prakashp




      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091031/3f59b5e4/attachment.html>