Compliance Documentation
What is Compliance Documentation?
The collection of policies, procedures, records, and evidence maintained to demonstrate adherence to regulatory and standard requirements.
Terms that appear alongside compliance documentation
Each of these is named in at least one of the same controls as compliance documentation. The number is how many controls name both.
- compliance 6 shared controls
- accountability 3 shared controls
- consumer protection 2 shared controls
Frameworks that govern compliance documentation
What the standards actually require on compliance documentation
Requirements naming compliance documentation across 6 standards, quoted from the control text.
HITECH 2024-2025 regulatory pipeline + sectoral application. KEY 2024-2025 INITIATIVES: (a) HIPAA SECURITY RULE NPRM (Notice of Proposed Rulemaking) issued by HHS OCR 27 December 2024 (89 FR 105672) proposing the FIRST MAJOR HIPAA Security Rule modernisation s...
HITECH-2024-2025-NPRM-ReproductiveHealth-Sectoral · HITECH 2024-2025 Pipeline - HIPAA Security Rule NPRM (Dec 2024), Reproductive Health, OCR Audits, Sectoral Application →Acknowledge exclusive enforcement by the Nebraska Attorney General Mike Hilgers (in office since January 2023). No private right of action. Civil penalties up to USD 7,500 per violation under the Nebraska Consumer Protection Act.
NDPA-8 · Nebraska Attorney General Enforcement, Permanent 30-Day Cure, and Penalties →Acknowledge exclusive enforcement by New Hampshire Attorney General John Formella (in office since January 2021). No private right of action. Civil penalty up to USD 10,000 per violation under NH Consumer Protection Act (RSA 358-A).
NHPA-8 · AG Formella Enforcement, Permanent 60-Day Cure, and Penalties →Acknowledge enforcement by New Jersey Attorney General Matthew Platkin (in office since February 2022) via the Division of Consumer Affairs (DCA). No private right of action.
NJDPA-8 · AG Platkin Enforcement, 18-Month Cure Sunset, and Division of Consumer Affairs →Acknowledge NDPC enforcement per NDPA Section 45 with administrative penalties up to NGN 10 million + 2% annual gross revenue (lower of) for serious violations + lesser penalties for minor breaches + compensation for affected data subjects + criminal penalties...
NG-NDPA-8 · Enforcement, Penalties, Data Controllers of Major Importance (DCMI), and Compliance →Per EHDS Article 105: phased application. Requirements include (a) understand Phased Application timeline + (b) implement requirements per phase + (c) cooperate with enforcement + (d) maintain compliance documentation.
EHDSREG-6 · Phased Application and Enforcement →Questions people ask about compliance documentation
What is Compliance Documentation?
Why is Compliance Documentation important for compliance?
Which compliance frameworks address Compliance Documentation?
Where can I learn more about Compliance Documentation?
See how Compliance Documentation applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.