Compliance

Also called: regulatory compliance, compliant, HIPAA, HIPAA compliant, GDPR, regulations, regulated industry

Meeting the laws, regulations and standards that apply to a company. In software the names heard most are HIPAA for US health information, GDPR for personal data of people in the European Union, and PCI DSS for payment card data. Which ones apply to a company is a legal question.

For example: A startup wants to sell scheduling software to clinics. A clinic's lawyer asks whether the product will handle patient information that HIPAA covers.

Connects to 24

SOC 2 Concept
Data privacy Concept
Payments Concept
Terms of service Concept
Region Concept
AI use policy Concept
ISSA Oklahoma User group
First-party tracking Concept
IRS Section 7216 Concept
Cyber liability insurance Concept
ISO/IEC 27001 Concept
Protected health information Concept
NIST AI Risk Management Framework Concept
Government contracting Concept
ForHumanity Organization, nonprofit
Federal Trade Commission Government
FutureCon Program
Women-owned small business certification Government, program
Oklahoma Corporation Commission Government
TechAccess Oklahoma Program
Fractional CISO Concept
Data processing agreement Concept
Business associate agreement Concept
Palo Alto Networks Organization, tool

This glossary is plain-language orientation, not legal or financial advice. Before you decide on a company structure, a contract, taxes or a fundraising deal, talk with a lawyer or an accountant.