GDPR
#fancy-title-673ee4b702ca8 a{ color: #274e75; }
EU’s General Data Protection Regulation or more commonly referred to as GDPR, is the most recent change in data privacy regulation in the last 20 years. Approved by the EU Parliament since April 14, 2016, GDPR will supersede the Data Protection Directive and bring together the numerous data privacy laws across Europe.
The key changes in GDPR fall mainly in several categories including increased in territorial scope, data subject rights as well as penalty. Territorial scope now extends to include Non-EU organizations that process data of EU citizens while data subject rights have made it mandatory for organizations to notify whenever a breach occurs. Moreover, by enforcing strict penalties such as 4% of organization’s annual global turnover or 20 million Euros (whichever is greater), organizations are steadily preparing to meet this new regulation.
In cases of users of open source databases like MySQL, MariaDB, and Percona, MyDiamo provides encryption, access control as well as auditing functionality that matches with the requirements of GDPR. Contact us for more information.
HIPAA/HITECH
#fancy-title-673ee4b703564 a{ color: #274e75; }
HIPAA, the Health Insurance Portability and Accountability Act of 1996 is a legislation that was enacted to provide data privacy and security of sensitive information in healthcare-related sectors for all medical patients. With health data breaches occurring more frequently in recent years, HIPAA has become one of the more apparent data privacy laws up to date. The HIPAA Security Rule mandates that all entities or businesses that administer treatment, payment, patient health records/information and more, to implement technical safeguards to protect patients’ data security.
According to the U.S. Department of Health and Human Services (HHS) standards, healthcare organizations are required to implement secure electronic access and technical safeguards like limit facility access control as well as secure data when transferring, removing, disposing, and re-using electronic media and electronic protected health information (ePHI).
In 2009, the Health Information Technology for Economic and Clinical Health Act (HITECH) was passed to further reinforce HIPAA requirements, imposing penalties on health organizations that infringe HIPAA Privacy and Security Rules.
PCI DSS
#fancy-title-673ee4b703d7b a{ color: #274e75; }
Payment Card Industry Data Security Standard or PCI DSS, in short, is a set of security standard that is established and administered by the Payment Card Industry Security Standards Council to regulate the handling of sensitive customer payment data.
MyDiamo solution applies strong cryptography (Requirement 4.1) which offers businesses or financial institutions a way to secure valuable cardholder data. With easy to set column-level encryption and access control privilege (Requirement 7.1), MyDiamo’s comprehensive solution will help businesses stay updated with PCI DSS regulatory compliance.
CCPA
#fancy-title-673ee4b7043a0 a{ color: #274e75; }
The California Consumer Privacy Act or CCPA, belongs to a wave of new data privacy regulations inspired by GDPR. The regulation is similar to GDPR in a sense that is not limited to any specific industry and this means that regardless of the location of your business, it must comply with the new regulation.
However, where GDPR requires all organizations to comply regardless of their size and activity, CCPA only applies to businesses that pass an annual revenue threshold, or those that process a certain amount of personal information. If you own an enterprise that does business in California that either
• have gross annual revenue of over USD 25 million; • buy, receive, or sell the personal data of 50,000 or more California residents, households, devices, or; • derive 50% or more of their annual revenue from selling the personal information of California residents
It is compulsory for you to follow the newest data protection regulation established by the California State Legislature and approved since January 1, 2020.
