enterprise. In order to address the broader issues surrounding records management, several other key stakeholders must be involved. Legal, IT, and Compliance tend to be the departments that touch information governance the most, though certainly other departments might seek representation. Many enterprises create information governance committees to ensure that all necessary constituents are represented and that all relevant issues are addressed. Tools To address retention and disposition, Records Management and Enterprise Content Management applications were developed. Sometimes detached search engines or homegrown policy definition tools were created. These were often employed at a departmental or divisional level; rarely were tools used across the enterprise. While these tools were used to define policies, they lacked the ability to enforce those policies. Monitoring for compliance with policies was increasingly challenging. Since information governance addresses so much more than traditional records management, several software solutions have emerged to include the vast array of issues facing records managers. Other available tools include: ARMA International Information Governance Implementation Model ARMA Generally Accepted Recordkeeping Principles CGOC Information Governance Process Maturity Model EDRM Information Governance Reference Model (IGRM) NHS Information Governance Toolkit Laws and regulations Key to IG are the regulations and laws that help to define corporate policies. Some of these regulations include: United States The Foreign Account Tax Compliance Act, or FATCA Payment Card Industry Data Security Standard, or PCI Compliance Health Insurance Portability and Accountability Act, or HIPAA Financial Services Modernization Act of 1999, or Gramm–Leach–Bliley Act (GLBA) Sarbanes–Oxley Act of 2002, or Sarbox or SOX Federal Rules of Civil Procedure California Consumer Privacy Act, or CCPA European Union General Data Protection Regulation NIS Directive United Kingdom Data Protection Act 2018 General Data Protection Regulation - GDPR will be incorporated directly into domestic law immediately after the UK exits the European Union NIS Regulations - The EU NIS Directive was transposed into UK law by DCMS, in May 2018 via the NIS regulations. Guidelines MoReq2 MoReq2010 ISO 15489 Information and Documentation - Records Management DoD 5015.2, or Design Criteria Standard for Electronic Records Management Software Applications See also Data defined storage Data governance Electronic discovery Enterprise content management Information management Information technology governance Knowledge management National archives Records management References External links EPA 10 Reasons for RM Content management systems Public records Data management