CPRA Compliance Checklist

…1, 2023. CCPA was amended to protect the personal data of California employees (B2E) and business-to-business (B2B) contacts and requires all organizations collecting California resident data to apply more extensive…

A Comprehensive Guide to US Privacy Laws

and Accountability Act (HIPAA) protects patients’ health and medical-related data, which requires specific disclosures and informed consent to share the information. Gramm-Leach- Bliley Act (GLBA) (1999) The Gramm-Leach- Bliley Act…

5 Ways To Uncover Sensitive, Unstructured Healthcare Data

…need a plan to discover and map unstructured data for compliance, privacy, remediation, access governance, cloud migration, minimization, and retention. Solution: Reduce Scan Time for Unstructured Data by 95% Hyperscan…

How to Map to Gartner’s DLP Framework

…DLP process for these key data needs. Individuals communicate via email, Slack, social and other avenues. In addition, almost everyone in the organization has access to numerous SaaS and other…

The Canadian Frontier: Preparing for Quebec Bill 64 & CPPA

…attention, involves the strength behind it to enforce compliance. New Monetary Fines Quebec’s Commission on Access to Information (CAI) will have the power to impose new monetary administrative fines for

4 Steps for a Successful Cloud Migration

to enforce policy (and flag violations), extend cloud monitoring tools – such as AWS Security Hub – with privacy policy insights, and leverage access intelligence to identify overexposed sensitive, personal,…

CIS Control 3 for Data Protection

…that are relevant to the business. CIS recommends “confidential,” “sensitive,” and “public,” for example. Document data flows — Security function: Identify Map how data flows throughout an organization to further…

How to Build a PII Catalog Across All of Your Data

…information into an identity or entity profile. Classify your data Personal data isn’t limited to personally identifiable information (PII), but extends to personal information (PI). Data classification, therefore, needs to