Preparing exam SC – 900 – Microsoft Security, Compliance, and Identity Fundamentals – Exploring concept of Data Compliance – Part 5

Hi All

Greetings for the day !!!

We are continuing discussing security concepts and preparing study material for exam SC-900 – Microsoft Security, Compliance and Identity Fundamental

Today in this article we will discuss concept called – Data Compliance and its related terms

If you didn’t got a chance to went through our previous channels, please have a look – https://knowledge-junction.in/?s=sc-900

What is COMPLIANCE ?

• Compliance is set of rules and regulations to protect our data
• Compliance are the inlined with laws and regulations to which we need to be inlined with
• Every organization is accountable for fulfilling the respective rules and regulation to protect the data (personal data / financial data), to keep the privacy
• Who issues these rules / regulation – Government agencies and Industry groups
• Examples :
  • GDPR – https://docs.microsoft.com/en-us/compliance/regulatory/gdpr
    • The General Data Protection Regulation (GDPR) introduces new rules for organizations that offer goods and services to people in the European Union (EU), or that collect and analyze data for EU residents irrespective the location of our organization / company.
  • HIPPA & HITECH act – https://docs.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech
    • Health Insurance Portability and Accountability act & Health Information Technology for Economic and Clinical Health Act
    • Set of U.S. healthcare laws – requirements for the use, disclosure and safeguard of individually identifiable health information

Some important concepts and terms related to data compliance

• Data residency
  • Data residency regulations govern the physical location where data can be stored and how and when it can be transferred, processed and accessed
  • These regulations differs based on jurisdiction
• Data sovereignty
  • Data (specially personal data) is subject to laws and regulations of country / region in which its physically collected, held or processed
  • These regulations become complex when data is stored in one location, collected from another location and processed in another location, in this case subject to laws of different countries or regions
• Data privacy
  • Providing notice and being transparent about the collection, processing, use and sharing of personal data are fundamental principal of privacy laws and regulations
  • What is personal data – Any data / information relating to an identified or identifiable natural person

Microsoft Purview compliance portal

• To view our organization’s compliance posture we will to be log in to – Microsoft Purview compliance portal – https://compliance.microsoft.com/homepage
• The Microsoft Purview compliance portal provides easy access to the data and tools we need to fulfil our organization’s compliance requirements
• We could navigate to Microsoft Purview compliance portal either from Microsoft 365 admin center – https://admin.microsoft.com/ or from direct URL – https://compliance.microsoft.com/homepage

View the Microsoft compliance offerings – https://docs.microsoft.com/en-us/compliance/regulatory/offering-home

Thanks for reading the article !!! Please feel free to discuss in case any issues / suggestions / thoughts / questions

HAVE A GREAT TIME AHEAD !!!