Compare policies to various compliance regimes such as PCI DSS (Payment Card Industry Data Security Standard) and generate reports for audits.

FORBES: Reduce Policy Complications to Enhance Security

Mike Smart from cryptography specialists Safenet said that many companies were only applying their highest security protocols to data such as credit card numbers.

BBC: Sony investigating another hack

And, in the payments industry, self-policing is in place through the PCI-DSS (Payment Card Industry Data Security Standard) which, while not a federal law, has become law in some states.

FORBES: The Epsilon Hack Attack: Time For "SOX For Consumers"?