Blog - Breach Notification Laws

What’s New in RadarFirst? HIPAA 4-Factor Summary Feature

HIPAA provides four risk factors (known as HIPAA 4-Factor) to determine if a breach of PHI has occurred. Organizations must demonstrate to the OCR that there is a low probability that PHI has been compromised based on a risk assessment. Continue reading to learn more about HIPAA 4-Factor and how RadarFirst can automate this assessment for reporting.

Regulatory Roundup – Consumer Privacy Laws Take the Front Seat in 2022

In case you missed it, here’s a recap of consumer privacy laws that have passed so far this year.

Increased Reliance on Third Parties and the Benefits of Digital Transformation

The 2022 RadarFirst Incident Benchmark Report shows untapped potential of digital transformation in privacy management.

Connecticut Enacts Consumer Data Privacy Law, Adding to Compliance Complexity

A win for consumers, Connecticut became the fifth state to enact a comprehensive data privacy law. Following in the footsteps as such states as California, Colorado, Virginia, and Utah, the law allows residents to opt-out of sales, targeted advertising, and profiling. Learn more in the blog.

Decision Intelligence Is Key to Reaping Benefits of Digital Transformation

As we set forth in our recent Guide to Digital Transformation for Privacy Incident Management, in order to reap the benefits of digital transformation, your organization must have decision intelligence; and RadarFirst is the decision intelligence platform you need to usher in digital transformation of your incident response management.

What You Need to Know About Japan’s Amended APPI Law

On April 1, 2022, amendments to Japan’s Act on Protection of Personal Information (Amended APPI) will come online, offering new guidelines, definitions, and requirements for data incidents and breaches that impact Japanese citizens. Japan’s data laws have already placed it at the top of list of countries concerned with protecting individual data rights – it was the first country to negotiate a reciprocal “adequacy” agreement with the EU, meaning data can flow between the EU and the designated “adequate” nation without any further data measures being put in place.