Compliance

Common Frameworks

GDPR (General Data Protection Regulation)

EU data protection regulation.

Key Requirements:

• Lawful basis for processing
• Data minimization
• Right to erasure
• Data portability
• Breach notification (72 hours)
• Privacy by design

HIPAA (Health Insurance Portability and Accountability Act)

US healthcare data protection.