2fa american bar association anti-money laundering audit bank secrecy act biometric bipa blockchain breach notification california canada client notification coast guard commission congress consent order consumer consent consumer notification credit report critical security controls cryptocurrency cryptojacking cybersecurity cyber threat data breach data privacy officer data security department of health and human services department of state department of transportation dmarc ebt electronic benefit transfer electronic protected health information email employment equifax eu eu-u.s. privacy shield european parliament european unioin european union executive order fcc fcra federal trade commission financial services fines fraud alert gdpr hacking hhsocr hipaa hippa homeland security identity fraud identity theft internet internet service provider irs it malware maritime cybersecurity meltdown michigan microsoft office 365 model law modlishka money service business multi-factor identification naic new mexico new york nist framework nist security controls office for civil rights oregon passwords personal data pipeda pre-breach services protected health information ransomware regulations research security rule social engineering social media south dakota spectre ssn statute supervisory authorities supreme court tax preparers tax returns utah virginia w2 washington