Modern IT regulations, such as the GDPR and the California Consumer Privacy Act, have expanded the scope of disaster recovery regulations. In addition to physical disasters, these regulations also cover cyberattacks and malware.