Consumer Privacy
Companies operating in specific industries or geographies where they keep consumer information need to comply with regulations such as GLBA (Gramm-Leach-Bliley Act), HIPAA (Health Insurance Portability and Accountability Act of 1996), SB 1386 (California Security Breach Information Act), EU Data Protection Directive, PCI DSS (Payment Card Industry Data security Act), etc. These regulations and mandates aim to ensure that companies are providing increased protection to consumer information in their company databases. As a result, companies have developed internal controls and policies to ensure compliance with these regulations. Non-compliance can lead to significant fines and penalties and even revocation of business license in extreme cases.
MetricStream enables organizations to continually audit their internal controls and processes to identify risks, validate compliance with such regulations and ensure that they have a mechanism to identify gaps/deficiencies and remedy them in a timely manner.
MetricStream uniquely combines software and content to deliver solutions for consumer privacy with embedded best practices templates, access to training content from an expert community, and integration of business processes with regulatory notifications and industry alerts.