Glossary

California Consumer Data Privacy Act (CCPA)

A statewide data privacy law, effective from January 1, 2020, that reinforced individuals’ rights by strengthening company laws around the use of personal information. CCPA is said to be a model of GDPR and is sometimes called the “GDPR light”.

Compliance Program

A compliance program is a company's set of internal artifacts (controls, policies, systems, etc.) put into place in order to comply with laws, rules, and regulations or to uphold the business's reputation.

Compliance Standard

A set of requirements defined by a law, or by an authority, that is widely accepted as a standard for demonstrating your trust to your customers.

Control

A control is something you follow as a company, so that you mitigate a potential risk. In TrustCloud, control is the foundational building block of a company’s program.

C

Covered Entities

If you are a Covered Entity, you are subject to, and legally required to, comply with all the standards set forth by HIPAA.

OR