Compliance Insights & GRC Guidance

Practical analysis and expert coverage across compliance frameworks, risk management, data privacy, and audit readiness.

Dark green background, "Weak Application Security Can Cost You Millions," 3 slanted images of fingers pointing to digital locks, and a "Learn the Basics" button

All Teams4 Compliance Officers175 GRC Leaders92 CISOs78 Risk Managers66 Data Privacy Officers60 IT Security Teams50 Regulatory Affairs Professionals43 Internal Auditors30

Topics:All4 Incident & Breach Response141 Regulatory Bodies125 Regulations & Laws66 Data Privacy58 Technical Controls43 Governance & Controls40 Identity & Access Management28 general27 Audit & Certification26 AML Framework16 Risk Management10 Security Frameworks7 Data Subject Rights4 Data Governance2 Due Diligence1

4 articles in Data Subject Rights · Clear filtersSort byNewest·Trending

EXTIA's €300K Fine: How 199 Ignored Erasure Requests Triggered GDPR Enforcement

Data Subject Rights

Latest

5 min read

EXTIA's €300K Fine: How 199 Ignored Erasure Requests Triggered GDPR Enforcement

What Happened In April 2025, the French Data Protection Authority ( CNIL ) audited EXTIA, an IT and engineering consulting firm, after multiple complaints from former employees and candidates about un

For CISOsRead article

Should You Centralize Patient Record Requests or Keep Them Local?

Data Subject Rights

6 min read

Should You Centralize Patient Record Requests or Keep Them Local?

The question at hand Your patient portal logs a records request at 9 a.m. By 9:15, it s in someone s email inbox. By lunch, it s been forwarded twice. By day 30, you re scrambling to figure out who ow

For Data Privacy OfficersRead

Which Data Broker Path Applies to You Under DROP?

Data Subject Rights

5 min read

Which Data Broker Path Applies to You Under DROP?

California s Delete Request and Opt-Out Platform (DROP) launched in January 2026. You have until August 1, 2026, to determine if your organization falls under its scope. This deadline doesn t leave mu

For Data Privacy OfficersRead

DPAs Issued Hundreds of Right-to-Object Decisions

Data Subject Rights

5 min read

DPAs Issued Hundreds of Right-to-Object Decisions

The European Data Protection Board updated its One-Stop-Shop case digest on the Right to Object and Right to Erasure in June 2026, adding hundreds of new enforcement decisions since the original publi

For Compliance OfficersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now