See how Datalogiq 360 helps with data regulations and standards
Data Governance and Compliance Regulations are Global
Meet data privacy and industry-specific regulations
NIST Privacy Framework:
The NIST Privacy Framework was created to help organizations improve their data privacy posture with proactive risk management, through a single unified framework that is scalable and adaptable to emerging challenges across data privacy and protection regulations.
The NIST Privacy Framework focuses on five core functions: Identify, Govern, Control, Communicate, and Protect.
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
General Data Protection Regulation (GDPR):
The adoption by the European Parliament of the General Data Protection Regulation (GDPR) has profound repercussions for digital privacy on both sides of the Atlantic.
Any sustainable approach to meeting EU GDPR requirements involves aligning compliance mandates with clearly defined policies and consistent technical processes.
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
California Consumer Privacy Act (CCPA):
The California Consumer Privacy Act (CCPA) protects the personal information of California consumers and requires that all organizations handling California resident information take responsibility to safeguard consumer data.
The CCPA requires that companies meet higher accountability standards for data collection and processing — and account for any data that can be linked, associated, or related to California residents.
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
Virginia’s Consumer Data Protection Act (CDPA):
Virginia’s Consumer Data Protection Act (CDPA) provides data rights for Virginia consumers. Modeled after GDPR, CCPA, and the Washington Privacy Act before it, CDPA places new obligations on data controllers and processors.
CDPA applies to anyone that conducts business in the Commonwealth of Virginia — or produces products or services for Virginia residents.
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
BCBS 239 l OCC Risk Data Aggregation and Reporting:
BCBS 239 is a standard aimed at reinforcing banks’ risk data aggregation capabilities and internal risk reporting practices.
- The Basel Committee on Banking Supervision (BCBS)
- Principles for effective risk data aggregation and risk reporting
Bank Secrecy Act l Anti-Money Laundering l Know Your Customer (BSA/AML/KYC):
Involves collecting, managing, analyzing, and reporting financial data to detect and prevent illicit activities like money laundering, fraud, and terrorist financing.
- Financial Crimes Enforcement Network (FinCEN)
- Federal Financial Institutions Examination Council (FFIEC)
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
CCAR (Comprehensive Capital Analysis and Review):
CCAR is a U.S. regulatory framework introduced by the Federal Reserve to assess, regulate, and supervise large banks and financial institutions — otherwise known as bank holding companies (BHCs).
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
Payment Card Industry Data Security Standard (PCI DSS):
Enforced by Payment Card Industry Security Standards Council (PCI SSC), PCI DSS outlines security requirements for organizations that process, store, or transmit credit card data. Compliance involves implementing network firewalls, encryption, and regular vulnerability assessments to protect cardholder information.
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
Sarbanes-Oxley Act (SOX): :
Enforced by the SEC, SOX is a federal law in the United States that sets requirements for corporate governance, financial reporting, and internal controls to protect investors and prevent accounting fraud. Section 404 of SOX mandates internal controls over financial reporting (ICFR) to ensure the accuracy and reliability of financial statements. SOX compliance includes controls related to data security and integrity.
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT
Health Insurance Portability and Accountability Act (HIPAA):
Enforced by the U.S. Department of Health and Human Services (HHS), HIPAA sets standards for protecting sensitive patient health information (PHI) and requires healthcare organizations to safeguard electronic PHI (ePHI) through encryption, access controls, and audit trails.
__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT