Small and medium-sized businesses often understand the critical importance of compliance, but just as often don’t have the resources to manage it like larger organizations. Campbell Hutcheson, CCO at Datto, offers guidance to help close that gap.
As of 2018, there were 30.2 million small and medium-sized businesses (SMBs) in the U.S., which account for 99.9 percent of all U.S. businesses. Despite their size and perceptions about what it means to be an SMB, small businesses are not immune to compliance requirements and regulations. Industry standards, such as the Health Insurance Portability and Accountability Act (HIPAA), Canada’s Anti-Spam Law (CASL) and Sarbanes-Oxley (SOX), dictate what a company can and cannot do with its customers’ data.
While standards obviously vary by industry and company size, the two regulations that have garnered widespread attention over the past year are the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act of 2018, which goes into effect on January 1, 2020. Both regulations are designed to enhance privacy rights and encourage businesses of all sizes to take every necessary step to protect consumers’ personal information.
Meeting compliance requirements such as GDPR and the California Consumer Privacy Act is challenging for…