SOC2, PCI, FedRAMP, cyber insurance. Just about any cybersecurity related compliance will have "All machines must have EDR."

I’ve seen comments mention banking, or privacy references maybe when handling SSN and birthdates together (airports, hospitals?).