Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » HIPAA » ePHI

ePHI

Any patient data that is created, stored, managed, transmitted, or shared via electronic means is Electronic Protected Health Information (ePHI). As per the HIPAA regulation, there are 18 HIPAA identifiers that qualify as ePHI. Covered entities and business associates are required to protect ePHI as per HIPAA security and privacy rule. 

Additional reading

CISO Essentials: The Top 5 Tools You Can’t-Miss

The cost of cybercrime is expected to soar by 15% every year, reaching a whopping $10.5 trillion annually by 2025. The real concern now isn’t if a cyberattack will happen but when it will strike. So, how can you protect your organization from this looming threat as a CISO (Chief Information Security Officer)? The key…

TISAX Explained: Understanding Scope, Impact, and the Certification

The automotive industry is accelerating toward a future of autonomous vehicles, robotaxis, and connected mobility. But as innovation speeds up, so do cyber threats—95% of automotive cyberattacks are remote, posing risks like hijacked vehicles or compromised braking systems. To secure this complex, data-driven landscape, the industry increasingly turns to TISAX (Trusted Information Security Assessment Exchange)….

What is PCI DSS Scope? (How to create one)

The PCI scope is a combination of identifying processes, people, and technologies that directly interact with or could otherwise influence the security of cardholder data (CHD). PCI scope states that your Cardholder Data Environment (CDE) must meet all 12 requirements within the PCI Data Security Standard (DSS). Many organizations find it hard to understand PCI…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.