Regulations

• HIPAA (Health Insurance Portability and Accountability Act)
• 164.310
• (1) Standard: Device and media controls.
• (2) Implementation specifications:
• (d) (i) Disposal (Required)
• (d) (ii) Media Reuse (Required)
• FACTA (Fair and Accurate Credit Reporting Act)
• GLB (Graham-Leach-Billy Act)
• PIPEDA (Personal Information Protection and Electronic Documents Act)
• FISMA (Federal Information Security Management Act)
• EPA (Environmental Protection Act)
• NIST (National Institute of Standards and Technology) - Guidelines for Media Sanitization
• NIST 800-88
• NIST 800-36
• NIST 800-30
• NSA (National Security Agency) - NSA/Central Security Service Policy Manual 9-12
• DoD (United States Department of Defense) - Security Standards
• PCI (Payment Card Industry) - PCI Data Security Standard
• SOX (Sarbanes-Oxley Act)
• Basel Accords (Basel I, Basel II)
• CESG (Communications-Electronics Security Group) - United Kingdom
• FERPA (Family Educational Rights and Privacy Act)