. . . . "The answer varies by industry, with state and federal regulations mandating different levels of compliance for different types of organizations." .