Data Privacy Laws
Security Compliance Standards
Geographical Regulations
Industry-Specific Regulations
General Cloud Computing Laws
100

This European regulation requires cloud service providers to protect the personal data and privacy of EU citizens.

What is GDPR (General Data Protection Regulation)?

100

This international standard provides specifications for information security management systems.

What is ISO 27001?

100

This country requires cloud service providers to store data about Russian citizens on servers within its borders.

What is Russia?

100

In the healthcare industry, this act sets standards for electronic health records and related cloud services.

What is the Health Information Technology for Economic and Clinical Health Act (HITECH)?

100

This standard, developed by the National Institute of Standards and Technology (NIST), provides comprehensive guidelines for Security and Privacy Controls for Information Systems and Organizations  

What is NIST 800-53?

200

This U.S. law protects customer data held by cloud service providers, especially in financial institutions.

What is the Gramm-Leach-Bliley Act (GLBA)

200

This U.S. standard outlines requirements for protecting health information in cloud storage.

What is HIPAA (Health Insurance Portability and Accountability Act)?

200

This Asian country's strict internet regulations include cloud censorship and local data storage requirements.

What is China?

200

This U.S. act requires educational institutions to protect students' educational records, impacting cloud storage solutions.

What is the Family Educational Rights and Privacy Act (FERPA)?

200

This principle in cloud computing law states that the country where the data is stored has legal jurisdiction over it.

What is Data Sovereignty?

300

This recent California law gives residents the right to know what personal data is being collected about them and whether it is being sold or disclosed.

What is the California Consumer Privacy Act (CCPA)?

300

This certification, often required by cloud service providers, is designed to prevent, detect, and respond to cyber incidents.

What is the Cybersecurity Maturity Model Certification (CMMC)?

300

This Australian law mandates that certain data must be stored in Australia, affecting cloud storage policies.

What is the Australian Privacy Act?

300

This regulation requires financial services firms in the EU to ensure the security of digital transactions, affecting their cloud usage.

What is the Payment Services Directive 2 (PSD2)?

300

This U.S. legislation allows government agencies to access data stored by cloud service providers under certain conditions.

This U.S. legislation allows government agencies to access data stored by cloud service providers under certain conditions.

400

This law requires federal agencies to protect citizens' private data and has influenced cloud data policies significantly.

What is the Federal Information Security Management Act (FISMA)

400

This set of security standards is specifically designed to secure cardholder data that is stored and processed in cloud environments.

What are the Payment Card Industry Data Security Standards (PCI DSS)?

400

This regulation requires Canadian federal departments to assess privacy risks when outsourcing data processing to the cloud.

What is the Privacy Impact Assessment (PIA) Policy of Canada?

400

This U.S. regulation requires energy companies to protect the grid and their infrastructure, including cloud-based assets.

What are the North American Electric Reliability Corporation (NERC) standards?

400

This act, passed in 1986 in the United States, regulates the interception of digital communications and affects cloud data privacy.

What is the Electronic Communications Privacy Act (ECPA)?

500

This international agreement between the USA and the European Union allows the legal transfer of personal data for commercial purposes, impacting cloud service providers significantly.

What is the Privacy Shield Framework?

500

This framework provides guidelines for managing and securing sensitive government and military data in cloud computing environments.

What is the Federal Risk and Authorization Management Program (FedRAMP)?

500

In Brazil, this legal framework sets out legal obligations for cloud service providers regarding internet data.

What is the Marco Civil da Internet?

500

This international standard provides guidelines for managing safety and quality in the pharmaceutical and life sciences industries, influencing their cloud data strategies.

This international standard provides guidelines for managing safety and quality in the pharmaceutical and life sciences industries, influencing their cloud data strategies.

500

This EU legislation provides a set of standardized rules for electronic transactions across EU member states, affecting cloud services.

What is the eIDAS Regulation?