definiens: shall mean all applicable Legal Requirements concerning the privacy, data protection, transfer or security of Personal Information, including, but not limited to, the following and their implementing regulations : the U.S. Health Insurance Portability and Accountability Act of 1996, as amended by the U.S. Health Information Technology for Economic and Clinical Health Act of 2009, including the regulations promulgated thereunder ( c ollectively ), the HITECH Act and the regulations promulgated pursuant thereto, the Gramm -Leach -Bliley Act, the Fair Credit Reporting Act, the Fair and Accurate Credit Transaction Act, the Telephone Consumer Protection Act, Section 5 of the Federal Trade Commission Act as it applies to the receipt, access, use, disclosure, and security of Personal Information, the CAN -SPAM Act, Children ’s Online Privacy Protection Act, PCI DSS, state data breach notification laws, state data security laws, state soci al security number protection laws, any Legal Requirements pertaining to privacy or data security and any applicable Legal Requirements concerning requirements for website and mobile application privacy policies and practices, or any outbound communication s ( including e -mail marketing, telemarketing and text messaging ), tracking and marketing