CSO Online article “The security laws, regulations and guidelines directory” contains a good list in this subject. This list is a good starting point when looking which laws and regulation there exist.
- Broadly applicable laws and regulations
- Industry-specific guidelines and requirements
- Key state laws
- International laws
It contains links into laws and regulations like:
- Sarbanes-Oxley Act (aka Sarbox, SOX)
- Payment Card Industry Data Security Standard (PCI DSS)
- Federal Information Security Management Act (FISMA)
- North American Electric Reliability Corp. (NERC) standards
- European Union Data Protection Directive
- Safe Harbor Act