Hi Mary(?) The three main set of regulations most commonly known and applied are Sarbanes-Oxley or SarBox or even shorter "SOX" which applies to only public companies. If you are a health-care providing agency you may fall under HIPAA, or Health Insurance Portability and Accountability Act...