Privacy Regulations

---

The California CCPA/CPRA applies to all companies that serve California residents and have at least $25 million in annual revenue must comply with the law. In addition, companies of any size that have personal data on at least 50,000 people or that collect more than half of their revenues from the sale of personal data, also fall under the law.

Abidance Consulting has designed, built and implemented CCPA programs for companies large and small. Abidance Consulting has also revamped existing CCPA programs to be more streamlined.

Clients such as Toyota Motors North America, Baylor College of Medicine, Gulf States Toyota, Xactly Corporation, Doble Engineering and others have trusted Abidance Consulting to build and/or revamp their CCPA/CPRA privacy programs.

 The VA CDPA applies to persons/entities that conduct business in Virginia or produce products or services that are targeted to residents of Virginia and that during a calendar year, control or process personal data of at least 100,000 consumers or control or process personal data of at least 25,000 consumers and derive more than 50 percent of gross revenue from the sale of personal data.

Abidance Consulting is currently working with a number of clients to prepare for the January 1, 2023 deadline for compliance.

 The Colorado CPA provides Colorado residents with the right to access, correct, and delete personal data and the right to opt-out not only of the sale of personal data but also for the collection and use of personal data in certain scenarios and imposes an affirmative obligation upon companies to safeguard personal data; to provide clear, understandable, and transparent information to consumers about how their personal dat are used; and to strengthen compliance and accountability by requiring protection assessments in the collection and use of personal data; and empowers the Colorado Attorney General and District Attorneys to access and evaluate a company’s data protection assessments, to impose penalties where violations occur, and to prevent future violations.

 Abidance Consulting is currently working with a number of clients to prepare for the January 1, 2023 deadline for compliance. 

The General Data Protection Regulation (GDPR) is a regulation in European Union law on data protection and privacy in the European Union (EU) and the European Economic Area (EEA). The GDPR's primary aim is to enhance individuals' control and rights over their personal data and to simplify the regulatory environment for international business.

Abidance Consulting has built and/or revamped multiple GDPR programs for both US based companies as well as foreign based companies.

Clients such as Pikolinos, Xactly Corporation, Toyota Motors North America, Harrod's, Adidas, Nokia and others have trusted Abidance Consulting with their GDPR needs.

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge.

Abidance Consulting's founder helped to create/write the HIPAA Privacy rules in 1994 with Senator Daschle's team. Having designed and built dozens of HIPAA Privacy/Security programs over the past 20 years, Abidance Consulting is able to use their vast library of documents to create/revamp your program as well.

Clients such as Blue Cross/Blue Shield Association, Horizon BCBS, Empire BCBS, Kaiser-Permanente, Florida HHS, Alabama HHS, Illinois HHS, Baylor College of Medicine and others have trusted Abidance Consulting to build or revamp their HIPAA privacy & security programs.

The ISO/IEC 27701 specifies requirements and provides guidance for establishing, implementing, maintaining and continually improving a Privacy Information Management System (PIMS) in the form of an extension to ISO/IEC 27001 and 27002 for privacy management within the context of the organization. It specifies PIMS related requirements and provides guidance for PII controllers and PII processors. It is applicable to all types and sizes of organizations, including public and private companies, government entities and not-for-profit organizations, which are processing PII within an ISMS.

Abidance Consulting has built and/or revamped and audited numerous ISO 2700X/27701 programs for both  US based companies as well as foreign based companies.

Clients such as LVMH, Pikolinos, Xactly Corporation, Tower of London Footwear  and others have trusted Abidance Consulting with their ISO2700X/ISO27701 needs.