Regulation

A plain-English explainer on HIPAA compliance: the Privacy, Security and Breach Notification Rules, who must comply (covered entities and business associates), what counts as a violation, the four penalty tiers, and why there is no official "HIPAA certification." General information, not legal advice.

A plain-English explainer on the Gramm-Leach-Bliley Act: the Financial Privacy Rule, the Safeguards Rule, the Pretexting provisions, who counts as a financial institution, and what the updated Safeguards Rule now requires. General information, not legal advice.

A plain-English explainer on Australia's Security of Critical Infrastructure (SOCI) Act: the sectors it covers, the positive security obligations, mandatory cyber incident reporting, the risk-management program requirement, and the enhanced obligations for systems of national significance. General information, not legal advice.