Topic

Audits

Audits are structured reviews used to evaluate whether an organization’s privacy, security, data governance, and AI practices comply with applicable laws, policies, and standards. Explore guidance on privacy and cybersecurity audits, GDPR accountability, CCPA cybersecurity audits, AI audits, independent assessments, internal controls, risk management, documentation, vendor oversight, remediation, and regulatory requirements in the U.S. and EU.

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

California's proposed CCPA cybersecurity audit regulations require certain businesses to conduct independent annual audits and executive certifications. This guide explains who is covered, what must be audited, and how to build a compliant cybersecurity governance program.

The Delete Act: California’s New Framework for Data Broker Accountability

California's Delete Act transforms data broker regulation into a comprehensive operational compliance framework. Learn who qualifies as a data broker and how to comply with registration, disclosure, deletion, audit, and ongoing governance obligations.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.

From Privacy by Design to Data Protection by Design: Principles and Practical Implementation

Privacy by Design embeds privacy into products, services, and business practices from the start. Explore its seven foundational principles, how they shaped Data Protection by Design under the GDPR, and practical steps organizations can take to turn privacy principles into everyday practice.

Subscribe to The de la Torre Review