Bank Secrecy Act and anti-money-laundering rules
Customer identification, an anti-money-laundering programme and reports of suspicious activity.
Financial Crimes Enforcement Network
Regulation United States Kyc Aml, Regulatory Reporting In force — — Official California Consumer Privacy Act
Tell consumers what personal information is collected and let them access, delete and opt out of its sale.
California Attorney General
Regulation California, United States Customer data, Data management In force — — Official E-Verify (where required by state or contract)
Confirm new hires' work authorisation electronically where a state law or a federal contract requires it.
U.S. Citizenship and Immigration Services
Regulation United States Hiring, Worker Onboarding, Credentials In force — — Official Employment eligibility verification (Form I-9)
Verify the identity and work authorisation of every new hire and keep the form on file.
U.S. Citizenship and Immigration Services
Regulation United States Hiring In force — — Official FTC Safeguards Rule
A written information security programme to protect customer financial information.
Federal Trade Commission
Regulation United States Customer data, Security and access In force — — Official Fair Housing Act
No discrimination in renting, selling or advertising housing on protected characteristics.
U.S. Department of Housing and Urban Development
Regulation United States Listings, Leasing, Tenant Screening In force — — Official Fair Labor Standards Act
Minimum wage, overtime pay for non-exempt employees, and records of hours and pay.
U.S. Department of Labor, Wage and Hour Division
Regulation United States Payroll, Scheduling and capacity, Policies and culture In force — — Official Family Educational Rights and Privacy Act
Protect the privacy of student education records and give students or parents access to them.
U.S. Department of Education
Regulation United States Customer data, Enrolment, Assessment In force — — Official General Data Protection Regulation
A lawful basis for processing personal data, records of processing, data subject rights and breach notification.
EU data protection authorities
Regulation European Union Customer data, Data management, Security and access In force — — Official HIPAA Privacy and Security Rules
Safeguard protected health information, limit its use and disclosure, and give patients access to their records.
U.S. Department of Health and Human Services, Office for Civil Rights
Regulation United States Security and access, Clinical Records, Patient Intake In force — — Official Hours of service for commercial drivers
Limits on driving and on-duty time, with records of duty status kept electronically.
Federal Motor Carrier Safety Administration
Regulation United States Dot Compliance, Routing In force — — Official Mail, Internet, or Telephone Order Merchandise Rule
Ship orders within the time promised (or 30 days), tell buyers about delays and refund when they cancel.
Federal Trade Commission
Regulation United States Logistics and fulfilment, Online Storefront, Returns In force — — Official OSHA safety and health regulations for construction (29 CFR 1926)
Fall protection, scaffolding, excavation and other site safety rules, with a competent person on site.
Occupational Safety and Health Administration
Regulation United States Health, safety and environment, Safety, Field Crew In force — — Official Occupational Safety and Health Act
A workplace free of recognised hazards, injury records where required, and training on the hazards of the job.
Occupational Safety and Health Administration
Regulation United States Onboarding and training, Health, safety and environment In force — — Official Tipped employees under the FLSA
Rules for tip credits, tip pools and who may share in tips.
U.S. Department of Labor, Wage and Hour Division
Regulation United States Payroll, Tips Labour Compliance In force — — Official Commercial driver's licence
Drivers of commercial motor vehicles hold a CDL for the class they drive.
Federal Motor Carrier Safety Administration and state licensing agencies
Licence United States Hiring, Dot Compliance In force — — Official EPA Section 608 technician certification
Technicians who service equipment containing refrigerants are certified for the equipment type.
U.S. Environmental Protection Agency
Licence United States Trade Licences, Technician Scheduling In force — — Official FINRA registration and qualification exams
Broker-dealer firms and their representatives register and pass the qualification exams for their role.
Financial Industry Regulatory Authority
Licence United States Hiring, Licences and registrations In force — — Official National Provider Identifier
Every covered healthcare provider holds an NPI and uses it on claims.
Centers for Medicare & Medicaid Services
Licence United States Credentialing, Coding Claims In force — — Official State contractor licence
Contractors hold the licence (and often a bond and insurance) the state requires for the work and contract size.
State contractor licensing boards
Licence US states Licences and registrations, Insurance and risk, Trade Licences In force — — Official State real estate broker and salesperson licence
Brokers and agents who represent buyers, sellers or landlords hold a licence in the state where they work.
State real estate commissions
Licence US states Licences and registrations, Transactions, Listings In force — — Official Tax exemption under section 501(c)(3)
Operate for exempt purposes, keep earnings from private benefit and limit political and lobbying activity.
Internal Revenue Service
Licence United States Licences and registrations, Fundraising, Restricted Funds In force — — Official USDOT number and operating authority
Commercial carriers register with FMCSA and display their USDOT number.
Federal Motor Carrier Safety Administration
Licence United States Licences and registrations, Dot Compliance, Fleet In force — — Official Building permits and inspections
A permit before construction or alteration, and inspections at set stages before occupancy.
Local building departments (on the International Building Code)
Permit US local jurisdictions Permits, Permits Inspections In force — — Official FDA Food Code (as adopted by states and localities)
Safe food handling, temperature control and a person in charge who knows food safety; inspected by the local health department.
U.S. Food and Drug Administration; enforced by state and local health departments
Standard United States Health Inspections, Back Of House, Menu Recipes In force — — Official ISO 9001 quality management
A documented quality management system with process control, corrective action and management review.
International Organization for Standardization
Standard International Quality control, Quality Systems, Supplier Quality In force — — Official ISO/IEC 27001 information security management
An information security management system with assessed risks, chosen controls and regular review.
International Organization for Standardization
Standard International Security and access, Data Protection, Uptime Incidents In force — — Official PCI Data Security Standard
Protect stored cardholder data, secure the networks that carry it and test the controls regularly.
PCI Security Standards Council
Standard International Billing and invoicing, Point Of Sale, Online Storefront, Subscription Billing In force — — Official Annual information return (Form 990)
Tax-exempt organisations report their finances, governance and programmes to the IRS every year.
Internal Revenue Service
Tax rule United States Accounting and close, Governance and decision rights, Funder Reporting In force — — Official Federal payroll tax withholding and quarterly return (Form 941)
Withhold income, Social Security and Medicare taxes from wages and report them every quarter.
Internal Revenue Service
Tax rule United States Payroll, Accounting and close In force — — Official