Blog - breach notification regulation

Data Breaches 2023: Consequences of Non-Compliance with Privacy Laws

Beyond regulatory fines or even class action settlements, consequences of non-compliance with privacy laws often follow a brand for years in its wake. Continue reading for major data breaches to keep on your radar and steps you can take today to protect your customers and safeguard their trust.

Privacy Regulatory Trends: CPRA and Beyond

The CPRA came into effect on January 1, 2023. While the privacy law’s expanded privacy rights are great for consumers, it complicates the work of privacy teams, especially as other states adopt their own versions of these expansions. Continue reading to learn more about the CPRA and how you can simplify compliance.

Data Breach Notification: How to Assess Your Incident Risk Assessment

The goal of privacy incident risk assessment should be to ensure compliance without overspending on notification. And with privacy regulations and regulatory guidance changing constantly, that’s quite a balancing act. One way to help keep your footing is to compare your organization’s notification rate against industry benchmarks, then use your internal metrics to pinpoint problems.

How to Manage and Mitigate Third-Party Risk

Modern organizations may have hundreds, if not thousands, of third-party relationships. Without the help of automation, it would be nearly impossible to manage and mitigate third-party risk with service providers, vendors, supply-side partners, and demand-side partners. Continue reading to learn how to effectively manage and mitigate third-party risk.

What’s New in RadarFirst? HIPAA 4-Factor Summary Feature

HIPAA provides four risk factors (known as HIPAA 4-Factor) to determine if a breach of PHI has occurred. Organizations must demonstrate to the OCR that there is a low probability that PHI has been compromised based on a risk assessment. Continue reading to learn more about HIPAA 4-Factor and how RadarFirst can automate this assessment for reporting.

Too Much or Too Little? The Risks of Under- or Over-Reporting Data Breaches

Given the complexity of breach notification laws, companies are often found under- or over-reporting data breaches.