Business Compliancy

Every business must now meet minimum information security and privacy standards.

It is now the responsibility of any one in business to know what they must do to be compliant. In other words, a businessperson needs to know the rules and follow them or suffer the consequences, which come in the form of substantial financial fines. More importantly and more damaging is the valuable loss of your customers trust and your business reputation.

If you are in business and participate in any of these eight (8) activities, you need to be compliant:

Who Must Comply?

Does Your Business...

    1. Collect, process, or store any personally identifiable information for your customers such as name, address, social security number, driver's license number, birth dates, etc.?
    2. Collect, process, or store any financial information for your customers such as loans, bank accounts, insurance, taxes, accounting, investments, debts, credit reports, real estate information, etc.?
    3. Collect, process, or store any health related personal information for your customers such as medical records, treatment, health insurance, billing, etc.?
    4. Collect, process, or store any personal information about your employees such as name, address, social security number, birth dates, 401K, health benefits, tax information, etc.?
    5. Extend credit or payment terms to your clients or customers?
    6. Provide products or services and then invoice or bill your clients or customers?
    7. Accept credit cards as a form of payment?
    8. Share client or customer information with any third parties?

If you answered "Yes" to any of the questions above, you MUST comply with one or more federal, state or industry security regulations.

What Is Your Responsibility?

    1. You must properly protect all customer and employee information against identity theft and fraud.
    2. You must implement and follow specific standards for Information security as required in federal, state and industry regulations.

General Rule: If you collect, use, transmit, or store personal or financial information about your customers, members, or employees, you must comply with several laws and regulations.