Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Data Retention
The GDPR Data Retention rules says that any personal data collected or processed must be retained solely for the duration necessary to accomplish the purpose for which the information was initially gathered. However, it is important to note that there are exceptions, such as scientific or historical research.
Additional reading
What Is the HIPAA Minimum Necessary Rule?
Much of the administrative simplification rule of HIPAA focuses on preventing unauthorized disclosure of protected health information (PHI). A good practice that helps to protect PHI is applying the HIPAA minimum necessary rule standard. This article details what this rule entails, how it works, cases where it is not applicable, and what happens when you…
A Complete Guide to ISO 27001 Surveillance Audit
If your organization has implemented ISO 27001, it must be audited by an accredited auditor to be certified. An ISO 27001 audit reviews your organization’s information security management system (ISMS) against a set of defined standards. Once you are certified, it does not stop there. Maintaining it involves more work, both for you and the…
What Is ISO 27701 (PIMS): Benefits, Primary Focus & Steps
Data privacy is one of the major concerns of your customers, regardless of the industry you operate in. According to Cisco, 94% of businesses believe that consumers will reject their products if they’re not reassured about their Privacy Information Management Systems (PIMS). But there’s already a strong framework for information security: ISO 27001, so what…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
