If your business is a financial institution, or your company maintains personal health information, specific Federal laws (Graham-Leach-Bliley, HIPPA) directly impact your obligations with respect to data security and personal health information, respectively.