What is the regulation which protects the consumer's sensitive data and tells them how we share their data?

What is the regulation which mandates that we don't share student information without the student's permission and we authenticate who we talk to?

Which regulation mandates that ACH Transactions must be secure and follow strict rules?

Which regulation is mandated by the USA Patriot act and requires that financial institutions implement a policy to verify the identities of persons with whom it does business?