comprehensive environmental response compensation and liability act (CERCLA)
The Comprehensive Environmental Response Compensation and Liability Act (better known as the Superfund law) states that the generator of a waste material containing hazardous substances is liable for proper disposal of that material throughout its life. This is true even if ownership of the material has changed hands. To comply with CERCLA, organizations should be aware that by selling or giving old electronic equipment to another party, they can be held liable for the full cost of cleanup, plus penalties, if the other party disposes of it improperly.
Visit EPA's overview for more information on CERCLA.
sarbanes-oxley act (SOX)
Born from the financial scandals of 2001, the Sarbanes-Oxley Act mandates the security of companies' financial systems and the IT infrastructure that supports those systems. Specifically, Section 404 holds that the confidentially and security of information are crucial foundations of compliance. As such, identity and proprietary data theft is one of the greatest challenges facing small businesses as they work to comply with this legislation that protects consumer financial, credit and health information. SOX requires that electronic data is erased and irretrievable at the end of the useful life of the IT asset.
You can find links to all Commission rulemaking and reports issued under the Sarbanes-Oxley Act at: http://www.sec.gov/spotlight/sarbanes-oxley.htm.
health insurance portability and accountability act (HIPAA)
For Healthcare Providers
The Health Insurance Portability and Accountability Act requires confidentiality and security of health data. Healthcare providers should comply with the recent HIPAA legislation to ensure end-of-life data security for information stored on computers and other electronic equipment.
See HIPAA's Advisory
gramm leach biley act (GLB)
For Financial Institutions
The Safeguards Rule under the GLB Act, requires that financial institutions take proactive steps to ensure the security of customer information. The Federal Trade Commission defines "financial institution" for the purposes of GLB compliance as any organization that works with individual's money. These include banks, credit unions and brokerages as well as any organization that receives data from these institutions. These also include:
- Preparers of income tax returns
- Consumer credit reporting agencies and credit counseling services
- Real estate transaction settlement services
- Debt collection agencies
See Federal Trade Commission Site
See Gramm Leach Biley Act
| 
