.svg)
HIPAACanadaPrivacy
HIPAA in Canada: When It Applies and What PHIPA Adds
HIPAA is a US law that reaches a Canadian company the moment that company creates, receives, maintains, or transmits protected health information...
SOC 2 vs HIPAA: What Overlaps and What HIPAA Adds
SOC 2 and HIPAA test most of the same security controls, so a company that handles health data for healthcare customers can run one security program...
Railway Security Incident (October 2026): What to Do, and What SOC 2, ISO 27001, GDPR and HIPAA Require
On October 21, 2026, Railway disclosed that an unauthorized third party may have accessed the encrypted environment variables of its customers and,...
SOC 2, ISO 27001 and HIPAA for Infrastructure Providers: One Program, Three Outputs
An infrastructure provider can meet SOC 2, ISO 27001 and HIPAA with one security program, because all three test the same capabilities: risk...