# Regulatory Compliance - Official Documentation & Resources

## GDPR (EU Data Protection)

1. [GDPR Official Text (EU Regulation 2016/679)](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679)
2. [GDPR Recitals (Explanatory Notes)](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679&qid=1532348683434#d1e32-1-1)
3. [European Data Protection Board Guidelines](https://edpb.ec.europa.eu/our-work/our-documents_en)
4. [GDPR Right-to-Erasure (Right to be Forgotten)](https://gdpr-info.eu/art-17-gdpr/)
5. [GDPR Data Portability (Article 20)](https://gdpr-info.eu/art-20-gdpr/)
6. [GDPR Privacy Impact Assessment (DPIA)](https://gdpr-info.eu/art-35-gdpr/)

## HIPAA (USA Healthcare)

7. [HIPAA Privacy Rule (45 CFR Part 164 Subpart E)](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html)
8. [HIPAA Security Rule (45 CFR Part 164 Subpart C)](https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html)
9. [HIPAA Breach Notification Rule](https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html)
10. [HIPAA Business Associate Agreement (BAA)](https://www.hhs.gov/hipaa/for-professionals/covered-entities/business-associates/index.html)
11. [HHS HIPAA Compliance Guidance](https://www.hhs.gov/hipaa/for-professionals/security/guidance/index.html)

## SOC 2 (Service Organization Control)

12. [SOC 2 Compliance Framework](https://www.aicpa.org/topic/audit-and-assurance/audit-and-assurance-standards/service-organizations)
13. [AICPA SOC 2 Trust Service Criteria](https://www.aicpa.org/resources/download/soc-2-2022-trust-service-criteria)
14. [SOC 2 Type II Audit Guide](https://www.aicpa.org/resources/download/system-and-organization-controls-soc2-2022-examination-guide)
15. [SOC 2 Implementation Guidance](https://www.aicpa.org/topic/system-and-organization-controls-soc)

## ISO 27001 (International Information Security)

16. [ISO/IEC 27001:2022 Standard](https://www.iso.org/standard/27001)
17. [ISO/IEC 27002:2022 Code of Practice](https://www.iso.org/standard/27002)
18. [ISO 27001 Implementation Guide](https://www.iso.org/contents/data/standard/02/70/27001ed3p1.pdf)

## PCI DSS (Payment Card Industry Data Security Standard)

19. [PCI DSS 4.0 Requirements](https://www.pcisecuritystandards.org/documents/pci-dss-v4-0.pdf)
20. [PCI DSS Compliance Levels](https://www.pcisecuritystandards.org/assessors_and_solutions/merchants)
21. [PCI DSS Secure Configuration Guidelines](https://www.pcisecuritystandards.org/documents/PCI_DSS_Secure_Configuration_Guidelines.pdf)

## Logging & Audit Tools

22. [Winston Logger npm](https://www.npmjs.com/package/winston)
23. [Winston-Mongodb Transport](https://www.npmjs.com/package/winston-mongodb)
24. [AWS CloudTrail Documentation](https://docs.aws.amazon.com/cloudtrail/)
25. [Drata Automated Compliance](https://drata.com/)
26. [Vanta Compliance Automation](https://www.vanta.com/)

## Data Retention & Privacy

27. [Data Retention Laws by Region](https://en.wikipedia.org/wiki/Data_retention)
28. [OWASP Data Protection Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Sensitive_Data_Exposure_Prevention_Cheat_Sheet.html)

## Context7 MCP Integration

29. [Context7 Compliance Monitoring](https://context7.ai/compliance)
30. [Context7 Regulatory Framework Updates](https://context7.ai/regulatory)

