Which law or guideline lists the four states a mobile device can be in when data is extracted from it?

a) Health Insurance Portability and Accountability Act (HIPAA)
b) Children's Internet Protection Act (CIPA)
c) Electronic Communications Privacy Act (ECPA)
d) Electronic Discovery Reference Model (EDRM)