text: Appendix B
  Table B-2. Federal cyberspace security laws and policies protecting United States citizens (continued)
  Name Description
  Consumer Privacy Protection Ensures the privacy and security of sensitive person information, to
  Act of 2017 (U.S. House of prevent and mitigate identity theft and to provide notice of security
  Representatives Bill 4081) breaches involving sensitive personal information. It also enhances
  law enforcement assistance and other protections against security
  breaches, fraudulent access, and misuse of personal information. It
  applies to organizations that collect, use, access, transmit, store, or
  dispose of sensitive personally identifiable information of 10,000 or
  more U.S. citizens during any 12-month period.
  Food and Drug Administration Regulation for the use of electronic records in clinical investigations. Is
  (Code of Federal Regulations a cybersecurity law that applies to organizations involved in clinical
  21, Part II) investigation of medical products, including sponsors, clinical
  investigators, institutional review boards, and contract research
  organizations. Many of these operations also fall under the Health
  Insurance Portability and Accountability Act. It concerns the use of
  information technology systems of these organizations, including any
  electronic systems used to create, modify, maintain, archive, retrieve,
  or transmit records used in clinical investigations.
  Commodity Futures Trading Applies to derivatives clearing organizations (entities acting as a
  Commission Derivatives medium for clearing transactions in commodities for future delivery or
  Clearing Organizations commodity option transactions).
  Regulation (Code of Federal
  Regulations 17, Part 39,
  Subpart B, and 39.18-System
  safeguards)
  Electronics Communications Together, are also known as the Wiretap Act and are privacy statutes.
  Privacy Act and Stored Originally designed to limit warrantless surveillance, however, also
  Communications Act (U.S. forbid the intentional use, disclosure, or access to any wire, oral, or
  Code 18, Chapters 119 and 121 electronic communications without authorization.
  European-U.S. Privacy Shield Protects European residents’ data held and processed by
  organizations in the U.S.