Assured SPC Blog

The Assured SPC Blog, published by Assured SPC, focuses on privacy and data security compliance for mid-sized businesses. It covers topics such as evolving privacy laws including state-specific regulations like Washington's My Health My Data Act, HIPAA compliance, and consumer health data protection. The blog also addresses practical aspects of privacy program implementation, risk assessment, data governance, and privacy operations automation. Additionally, it discusses cybersecurity frameworks, emerging challenges like AI/ML biases, and strategies for incremental cybersecurity improvements. The content is aimed at helping organizations navigate complex regulatory environments and implement sensible privacy and security programs.

Subscribe via RSS
Visit Blog
By: Assured SPC

Latest from Assured SPC Blog - Page 2

Data breaches and the 30 day cure
The California Consumer Privacy Act provides a business a 30-day cure period that consumers must give the business before suing for statutory damages. I’ve had many discussions with other security professionals about how

…

Reasonable Security in the Law
Many laws require that businesses implement “reasonable security” practices and procedures or reasonable security safeguards.   Some of these include GLBA, HIPAA, CCPA and the NY SHIELD Act.  To many the definition of reasonable security is

…

Comparison of GDPR, CCPA, CPRA and PEPIDA
Comparing privacy laws can be challenging

Some US companies need to comply with GDPR.   Others need to comply with the California Consumer Privacy Act, CCPA. If the California CPRA ballot initiative passes in

…

New Restrictions for GDPR data in the US
Disclaimer: We specialize in operationalizing data security and privacy requirements and work closely with security and privacy attorneys, but we are not attorneys.
The European Court of Justice ruled yesterday that Privacy

…

Privacy does not have to be complicated. But board members have a fiduciary duty for their organization’s data security and privacy compliance.   Many organizations create significant financial and reputational risk for themselves through decisions on governance, cultural change and adoption

…

vCISO advice on work from home
Step one was the crisis-driven transition to work from home.   Step two is managing the risk that was created by step one.
Worldwide we transitioned to shelter in place, and much of the time

…