ISC — Quick Sheet
Privacy & Regulatory Frameworks
Read time: ~5 minutes
One-minute revision
- Confidentiality = information designated confidential; privacy = personal information + individual rights
- Privacy principles: notice, choice/consent, collection limitation, use/retention/disposal, access, third-party disclosure, security, quality, enforcement
- GDPR (EU, erasure/portability, extraterritorial), HIPAA (health), GLBA (financial), PCI DSS (contractual), CCPA/CPRA (state)
- Frameworks: COSO internal control, COBIT IT governance, NIST CSF (Identify, Protect, Detect, Respond, Recover), ISO 27001 certifiable ISMS