Why is the U.S. cybersecurity law landscape often described as a “patchwork of sectoral laws”? What are the implications for companies

Q 2.1: Why is the U.S. cybersecurity law landscape often described as a “patchwork of sectoral laws”? What are the implications for companies? 

TQ 2.2: What industry sectors or types of business practices are likely to be subject to cybersecurity regulations? 

TQ 2.3: Whom does the Health Insurance Portability and Accountability Act regulate? What are some situations in which information related to health is not regulated by HIPAA? 

TQ 2.4: When does the privacy rule require the patient’s authorization before protected-health information can be used or shared? What are some examples of situations where an authorization is not required? 

TQ 2.5: What categories of safeguards does the HIPAA security rule require for protected health information? Provide a few examples in each category.’