Relevant laws, statutes, regulations, binding industry codes, regulatory permits and licenses that are in effect and address the protection and handling of personal information. For assessments, this term may refer directly to data privacy surrounding elements of scoped target data or systems.