Identification should include compliance with

• international
• federal (e.g., Health Insurance Portability and Accountability Act [HIPAA], Freedom of Information Act [FOIA])
• state
• local
• industry

laws, regulations, policies, guidance, and standards.