Relevant laws, enactments, regulations, binding industry codes, regulatory permits and licenses that are in effect and address the protection, handling and data security. For assessments, this term may refer directly to scoped target data or systems.