Bangladesh Telecom: Mobile Data Driving Innovation Forward

[Mostafa044]

The CCPA went into effect on January 1, 2020. It provides California consumers with additional rights and protections regarding businesses' use of their personal data. The CCPA is very similar to the GDPR and imposes many of the same obligations on businesses as the GDPR, with the exception of implementing effective security measures to protect customers' personal data from unauthorized access, destruction, alteration, or disclosure.

Health Insurance Portability and Accountability Act (HIPAA)
HIPAA is the U.S. data protection and security legislation that governs electronically protected health information (ePHI). It primarily applies to healthcare providers and partner institutions that process this type of data. HIPAA defines security requirements for electronic information, which includes specific physical, technological, and administrative safeguards. To comply with HIPAA regulations, healthcare companies must implement certain security measures: secure traffic encryption with a VPN, secure messaging applications, encrypted email services, and reliable business password management .

Sarbanes-Oxley Act (SOX)
The SOX Act was enacted in 2002 to protect shareholders and the slovenia phone number list general public from fraudulent corporate practices and to improve the accuracy of corporate reporting. While the act does not specify how an organization must retain documents, it does define what documents must be retained and for how long. SOX primarily applies to public companies.

Payment Card Industry Data Security Standard (PCI DSS)
PCI DSS is a set of regulations for organizations that process, store, and transmit credit card data. It sets out requirements to ensure that all payment card data is processed securely.

International Organization for Standardization (ISO, International Standards Organization) 27001
ISO/IEC 27001 is an information security management standard that describes how business entities should manage risks associated with cybersecurity threats. ISO 27001 is used to define data security guidelines and criteria to protect an organization's data from unauthorized access or loss. ISO/IEC 27001 is not legislation like GDPR. Rather, it is a standard that helps businesses comply with regulations such as GDPR in a cost-effective manner.