HIPAA (Health Insurance Portability and Accountability Act)
A US law mandating the privacy and security of protected health information (PHI) for individuals. Covered entities like healthcare providers and business associates must comply with HIPAA regulations
ISO 27001
An international standard for information security management systems (ISMS). It outlines best practices for managing information risks across all aspects of an organization
PCI DSS (Payment Card Industry Data Security Standard))
A set of requirements for organizations that handle cardholder data. It helps ensure the safe storage, processing, and transmission of credit card information
GDPR (General Data Protection Regulation)
A European Union (EU) regulation governing data privacy and protection for individuals within the EU. It requires organizations to handle personal data transparently and securely.
SOC 2 (Service Organization Controls)
A framework developed by the American Institute of CPAs (AICPA) for managing security, availability, integrity, confidentiality, and privacy risks related to a service organization's system. There are two types: SOC 2 Type 1 for a point-in-time review and SOC 2 Type 2 for a period of time.
