GDPR & CCPA
Data minimisation, user consent, data subject access requests, breach notifications.
ISO/IEC 27001
Information Security Management System (ISMS), incident response planning, risk assessments.
SOC 2 Type II
Data confidentiality, availability, processing integrity.
Industry-specific regulations (e.g., PCI DSS, HIPAA)
Tailored compliance processes where applicable.
AI Act (EU)
Adherence to risk-based AI system classification, transparency obligations.
Last updated 8 months ago