As Gary stated, there are several federal laws that also cover protection of personal data.  Since each one pertains to certain sectors, you need to determine if they pertain to your organization.  For example - HIPAA pertains to Health plans, health care clearinghouses, and health care providers, Graham-Leach-Bliley pertains to financial institutions, and FACTA (which is a revision of the Fair Credit Transaction Act) pertains to Consumer reporting agencies and persons who use consumer reports from such agencies, persons who furnish information to such agencies, and users of information that are subject to subsection (d) of 15USC section 1681m.

Ginny Jones 
(Virginia A. Jones, CRM, FAI) 
Records Manager 
Information Technology Division 
Newport News Dept. of Public Utilities 
Newport News, VA 
[log in to unmask] 

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]