Many international IT compliance standards, laws, and regulations require regular user access reviews, including: SOC2, ISO27001, PCI DSS, HIPAA, GDPR, SOX.