Privacy Regulations
Across the U.S. and Europe, governments are reacting to frequent reports of security breaches that are exposing confidential personal information, and increasing the risk of consumers and employees becoming victims of identity theft.
Government agencies are responding by enacting privacy regulations to require businesses and other organizations to substantially improve safeguards for protecting confidential personal information. In some instances, these privacy regulations clearly define minimum security requirements that must be employed, but oftentimes it is left up to each organization to determine what safeguards should be employed.
Networks Unlimited assists customers with achieving compliance of privacy regulations by:
- Conducting audits: privacy compliance, vulnerability assessments, data discovery, and data leakage
- Performing security policy reviews and consulting on security policy development
- If needed, deploying and supporting the security technologies necessary for safeguarding confidential information
These pages will assist you in accessing privacy regulations, particularly at the state and federal level. In some cases, we have attempted to interpret and summarize the regulations. In others, we are simply pointing you in the right direction. These pages are not intended to address privacy regulations, such as the Privacy Act of 1974, which apply to federal government agencies.
As you determine which regulations apply to your business or organization, it is important to keep in mind you are likely required to comply with privacy regulations of states in which you have employees and/or consumers, even though your business is headquartered elsewhere. For example, the privacy regulations of the State of Massachusetts apply to any business or legal entity, even those without offices in Massachusetts, if the business collects, stores, or handles confidential personal information regarding Massachusetts residents, whether employees or consumers.
Please note this information is for informational purposes only and does not constitute legal advice. Networks Unlimited recommends, as part of your compliance program, involving an attorney who specializes in this area.