Consider GLBA, HIPAA, FISMA, FERPA, and SOX. What types of businesses or organizations are not regulated in their use of your information? To what information do they have access? Is this the same kind of information that is protected in other types of businesses? What makes the difference?