Laws and regulation

Categories USA Europe UK India China
Protecting critical information infrastructure and personal data Cybersecurity Information Sharing Act (CISA) General Data Protection Regulation (GDPR) Data Protection Act 2018 Information Technology Act 2000 Cyber Security Law
Criminalizing malicious computer usage and unauthorized access to computer systems Computer Fraud and Abuse Act (CFAA) Network and Information Systems Directive (NISD 2) Computer Misuse Act 1990 Information Technology Act 2000 National Security Law
Prohibiting circumventing technological measures to protect copyrighted works Digital Millennium Copyright Act (DMCA) Cybercrime Convention of the Council of Europe Anti-Terrorism Law
Regulating the interception of electronic communications Electronic Communications Privacy Act (ECPA) E-Privacy Directive 2002/58/EC Human Rights Act 1998 (HRA) Indian Evidence Act of 1872
Governing the use and disclosure of protected health information Health Insurance Portability and Accountability Act (HIPAA) Police and Justice Act 2006 Indian Penal Code of 1860
Regulating the collection of personal information from children Children's Online Privacy Protection Act (COPPA) Investigatory Powers Act 2016 (IPA)
A framework for cooperation between countries in investigating and prosecuting cybercrime Regulation of Investigatory Powers Act 2000 (RIPA)
Outlining individuals' legal rights and protections regarding their personal data Digital Personal Data Protection Act Measures for the Security Assessment of Cross-border Transfer of Personal Information and Important Data
Outlining individuals' fundamental rights and freedoms State Council Regulation on the Protection of Critical Information Infrastructure Security

Pentest Stages

image.png