HIPAA (Health Insurance Portability and Accountability Act) is a US law protecting the privacy and security of health information. It applies to healthcare organisations and the businesses that handle that data for them.
Encryption at rest and in transit means protecting data with encryption both while it is stored and while it moves across networks. Stolen or intercepted data then stays unreadable without the keys.
The GDPR (General Data Protection Regulation) is the EU law governing how organisations collect, use, store and share personal data about people in the EU. It sets duties for businesses and gives individuals enforceable rights.
Identity and access management (IAM) is the set of policies and systems that control who or what can access which resources. It spans login, roles, permission reviews and offboarding.
A data processing agreement (DPA) is a contract with a supplier that handles personal data on your behalf. It sets out what the supplier may do with that data and how it must be protected.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.