american bar association audit blockchain breach notification california canada client notification coast guard commission congress consent order consumer consent consumer notification credit report critical security controls cryptocurrency cybersecurity cyber threat data breach data privacy officer data protection officer data security department of commerce department of health and human services department of state department of transportation dmarc ebt electronic benefit transfer electronic protected health information email equifax ethereum eu eu-u.s. privacy shield european parliament european unioin european union executive order fcc fcra federal communication federal trade commission fines fraud alert gdpr hacking hippa homeland security identity fraud identity theft internet internet service provider irs it malware maritime cybersecurity maryland meltdown michigan microsoft office 365 model law multi-factor identification naic net neutrality new mexico new york nist framework nist security controls office for civil rights oregon passwords patching personal data phishing pipeda pre-breach services ransomware rdp research security posture assessment security rule security vulnerabilities service provider agreement social engineering social media spectre ssn statute supervisory authorities supreme court tax preparers tax returns tennessee third party utah virginia virus w2 washington