Privacy Regulation
What is Privacy Regulation?
Laws and rules governing the collection, processing, storage, and sharing of personal information to protect individual privacy rights.
Frameworks that govern privacy regulation
What the standards actually require on privacy regulation
Requirements naming privacy regulation across 6 standards, quoted from the control text.
Every agreement a credit reporting body enters with a credit provider to satisfy subsections 20N(3) and 20Q(2) of the Act (quality and security of credit reporting information) must oblige both parties to comply, as applicable from time to time, with Part IIIA...
australia-privacy-credit-reporting-code-2025::2(2) · Credit reporting agreements between bodies and providers must bind both to Part IIIA, the Regulations and the Code →The organisation manages and retains information in and output from the system according to applicable law, policy, standards and operational requirements.
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::SI-12 · SI-12 Information management and retention →The entrepreneur needs the consent of the works council for every proposed decision to adopt, amend or withdraw an arrangement on the processing and protection of the personal data of the persons working in the undertaking (for example a staff privacy regulati...
netherlands-works-councils-act-wor::27(1)(k) · Art. 27(1)(k) Obtain the works council's consent to a staff arrangement: processing and protection of staff personal data →Operate supply chain security + secure development lifecycle (SDL) + privacy + multi-vendor trust per O-RAN WG11 Security Requirements + Open Fronthaul vendor profile + national telecom security regimes.
ORANWG11-8 · Supply Chain, Secure Development Lifecycle, Privacy, Multi-Vendor Trust →Per OWASP MASVS v2 MASVS-PRIVACY: protect privacy + personal data in mobile apps. Requirements include (a) implement data minimisation collecting only data necessary for the function + (b) provide clear + accessible privacy notices + consent mechanisms + (c) i...
OWASPMASVS-8 · MASVS-PRIVACY: Privacy and Data Protection →A plan or issuer may not enter into an agreement with a provider, provider network, third-party administrator or other service provider offering network access that would directly or indirectly restrict it from giving provider-specific cost or quality of care...
us-no-surprises-act-42-usc-300gg-111-to-300gg-139-and-45-cfr-part-149::300gg-119 · Do not agree to gag clauses that restrict sharing provider-specific cost or quality information or access to de-identified claims data, and attest annually →Questions people ask about privacy regulation
What is Privacy Regulation?
Why is Privacy Regulation important for compliance?
Which compliance frameworks address Privacy Regulation?
Where can I learn more about Privacy Regulation?
See how Privacy Regulation applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.