The Data Protection Act 2018: The UK’s Implementation of GDPR
Key Points Introduction If you run a cloud-hosted company that collects customer data in the United Kingdom (UK), you would have heard about the General Data Protection Regulation (GDPR). GDPR is regarded as the most important data protection law in the European Union (EU) and the United Kingdom (UK). The primary purpose of UK privacy…
Sep 24, 2024
Who Does HIPAA Apply To? A Guide for Healthcare Providers
Looking for answers to questions like who does HIPAA apply to? Or whether HIPAA applies to you and your employees? The answers to these questions simply depend on whether your cloud-hosted company meets the criteria of HIPAA compliance. HIPAA, also known as the Health Insurance Portability and Accountability Act, is a US Federal Law that…
Sep 20, 2024
SOC 1 vs SOC 2 vs SOC 3 Comparison — Overview & Comparison
If you run a SaaS business and want to target mid-market or enterprise customers, you are going to be asked about the security posture of your company at one point or another. You may try to pass through them by answering security questionnaires but when your sales deal is stuck and cannot move forward because…
Sep 20, 2024
12-Step GDPR Compliance Checklist
Applications used in daily life collect large amounts of data through embedded trackers. This data could potentially be used in a cyber attack, leading to a violation of data privacy. According to Salesforce, 60% of their customers felt they had no control over how their personal data is used. The European Union established the General…
Sep 19, 2024
The Ultimate SOC 2 Compliance Questions
The hardest thing about SOC 2 is knowing where to start. What makes it even tougher is the fact there’s no easy template to follow – every SOC 2 audit is unique to the organization carrying it out. However, there’s no need to despair! “While there’s no one size fits all answer, there are several…
Sep 19, 2024
Guide to Conducting a Data Protection Impact Assessment
Key Points Introduction Data Protection Impact Assessment (DPIA) is a part of the EU’s General Data Protection Regulation (GDPR). For the uninitiated, GDPR is the EU’s new law formed to unify all data protection laws across the European Union. According to the GDPR Certification, performing DPIA is now mandatory for any cloud-hosted company that launches…
Aug 16, 2024