The European Union (EU) implemented the General Data Protection Regulation (GDPR) in May 2018. It is meant to protect the Data and Privacy of European ‘citizens’. And, is applicable to any Business that stores or transacts data of these subjects. However, the consequence of it is that even Businesses that are international or provide services
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) legislation came into action for Healthcare Industry to protect patients’ medical information in terms of implementing Data privacy and Information Security controls. Even though it is more than twenty years old, it is relevant even today in light of Information Security breaches, Cyber attacks and
In less than a week, people around the globe are reading another breaking news around Information Security concerns following the massive breach of Marriott International Inc. As per the news, the UK Parliament seized a set of internal emails of one of the world’s largest Social Media platform Company Facebook as a part of its
Looking at the recent news on non-compliance in Companies globally, the stakes involved and the magnitude of consequences, it becomes clear that maintaining Regulatory Compliance is undoubtedly a priority and continuous concern for Organizations across all Industry Verticals. Organizations Operate under constant pressure from Regulators and are required to provide Regulatory Compliance updates at frequent
Efficient GDPR Compliance Management encompasses vital processes like Integrated Risk Mapping, Gap Analysis, Policy and Procedure Tracking and conducting Compliance Audits. In our previous post, we discussed about Integrated Risk Mapping and Compliance Testing. With this post we discuss how monitoring GDPR Rules and Controls is a continuous process that can be efficiently and effectively
GDPR (General Data Protection Regulation) is an Exhaustive and Technically demanding Regulation around Data Privacy ever established. The inherent need of 360 degree Visibility and Strategic Enforcement presents a challenge for Companies globally wanting to be GDPR Compliant. Some of the major challenges around being GDPR Compliant is having a robust Data Handling and Data Storage
The new EU Legislation, General Data Protection Regulation (GDPR) is the latest reform of Data Protection Rules that not only requires extensive Data Protection Security and Reporting requirements but also surfaces the need for an end-to-end Compliance Management system. The Board, the C-Suite, the Audit & Compliance departments, and the Senior Management remain responsible for Regulatory
The new EU Legislation, General Data Protection Regulation (GDPR) is a latest reform of Data Protection Rules that not only requires extensive Data Protection Security and Reporting requirements, but also surfaces the need for an end-to-end Compliance Management system. The Board, the C-Suite, the Audit & Compliance departments and the Senior Management remain responsible for Regulatory
The new EU Legislation, General Data Protection Regulation (GDPR) is a latest reform of Data Protection Rules that implies new extensive Data Protection Security and Reporting requirements in addition to increased financial penalties for non-Compliance. Organizations can have strong foundations for successfully achieving GDPR Compliance by acting early and adopting a holistic approach which includes
As Europe’s General Data Protection Regulation came into action from 25th May 2018,a new era in Data Privacy and Information Security begins wherein Companies, Multinationals and Organizations globally are compelled to change how they gather and handle Personal Data of the European Citizens. As per a recent WSJ article, many of these firms aren’t