Topic

Access Controls

Access Controls are safeguards that determine who can access personal data, systems, and other information resources and what authorized users can do with them. Explore guidance on authentication, authorization, least privilege, role-based access, privileged accounts, access reviews, and other technical and organizational measures used to prevent unauthorized access and support compliance with the GDPR and other privacy and security laws.

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

California's proposed CCPA cybersecurity audit regulations require certain businesses to conduct independent annual audits and executive certifications. This guide explains who is covered, what must be audited, and how to build a compliant cybersecurity governance program.

GDPR Data Security Explained: A Practical Guide to Technical and Organizational Measures

A practical guide to GDPR data security requirements, including risk assessments, technical and organizational measures, encryption, pseudonymization, resilience, processor oversight, staff training, authentication, and the ongoing testing needed to protect personal data.

Data Protection by Design and by Default Under the GDPR: What Article 25 Requires

Learn what data protection by design and by default means under Article 25 GDPR, including privacy-protective defaults, data minimization, risk-based safeguards, accountability, DPIAs, processor selection, and how organizations can build data protection into systems from the start.

Subscribe to The de la Torre Review