There are many data protection regulations, including the Health Insurance Portability and Accountability Act (HIPAA), the Gramm-Leach-Bliley Act (GLBA) of 1999 (Financial Modernization Act of 1999), and the European Data Protection Directive. These all have language regarding how an entity mustprotect personal information. Other regulations specify the destruction discarded personal information, as is the case with the Final Disposal …
Continue reading “Is Your Data Security Policy and Process Reasonable?”