Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

{} [+]