Applicable laws, enactments, regulations, binding industry codes, regulatory permits and licenses that are in effect that address the protection, handling and security of Target Data and Protected Target Data and that are determined to be in scope by the service provider or client at the scoping of the engagement.