Stage 1: Initial Information Security and Legal Compliance Audit
Lawyer's actions:
- Analysis of company structure, types of processed data (PII, PHI, financial data, etc.);
- Identification of applicable regulations:
- FTC Act, CCPA, GDPR, HIPAA, GLBA, FISMA, NYDFS, etc.;
- Conducting a legal audit of security policies, vendor contracts, internal procedures.