Which concept is described by adhering to laws governing data access and security?

Which concept is described by adhering to laws governing data access and security?

• A. Strategic Objectives
• B. Enable Collaboration
• C. Regulatory Compliance
• D. Protect Resources

Answer: (C)

Regulatory compliance is about adhering to laws governing data access and security. It covers requirements from privacy and security regulations (such as GDPR, HIPAA, and PCI DSS) that dictate how data is collected, stored, accessed, and protected. In practice, this means implementing controls like least-privilege access, strong authentication, audit trails, data encryption, and regular access reviews to meet legal obligations, demonstrate accountability, and enable proper breach notification and rights for individuals. This focus on legal and regulatory obligations distinguishes it from broader aims like strategic objectives or collaboration, and from the more general idea of protecting resources, which doesn’t by itself address laws and external compliance requirements.

Regulatory compliance is about adhering to laws governing data access and security. It covers requirements from privacy and security regulations (such as GDPR, HIPAA, and PCI DSS) that dictate how data is collected, stored, accessed, and protected. In practice, this means implementing controls like least-privilege access, strong authentication, audit trails, data encryption, and regular access reviews to meet legal obligations, demonstrate accountability, and enable proper breach notification and rights for individuals. This focus on legal and regulatory obligations distinguishes it from broader aims like strategic objectives or collaboration, and from the more general idea of protecting resources, which doesn’t by itself address laws and external compliance requirements.