Addressing global regulatory mandates

Virtually all organizations around the globe are obligated to protect employee, customer and business partner confidential information. Keeping pace with the ever-changing regulatory landscape can prove a daunting task that is further complicated by cross-border transfer issues and differences in privacy regulations throughout the world.

To cope with these changes, Co3 customers lean on Co3’s industry-leading knowledgebase informed by a range of resources, including the company’s internal team of privacy specialists, formal and informal external relationships and the Co3 customer community. This network proactively researches and tracks all global privacy breach disclosure regulations from proposal to deliberation to ratification. Because of this process, regulations are thoroughly reviewed and carefully considered long before they go into effect. Once active, regulations are enabled / updated in the Co3 platform and affected customers are notified.

This update addresses regulations that are now in effect and which organizations must adhere to or risk penalties, including fines. Specifically, the regulatory updates covered in this release include:
o U.S.—New and Amended Regulations: Support for a new breach notification regulation in Kentucky as well as updates in Florida and Iowa. Also includes coverage for new insurer requirements in California.
o EMEA—New Regulations: Coverage for new telecommunications and Internet Service Providers (ISPs) requirements in the EU as well as breach regulations in Dubai and South Africa.
“With each new data breach, the stakes rise globally as lawmakers create new regulations or toughen existing ones in response to public concern,” said John Bruce, CEO at Co3 Systems. “The Co3 platform removes the burden of tracking the myriad of global regulatory updates allowing customers to focus resources on executing their response."

Purpose-Built Incident Response Management
Co3's Privacy Module was the first daily use and preparedness tool for privacy incidents and is considered today as the industry standard. It provides an easy, automated way to ensure consistency and accountability—across teams, organizations and external stakeholders—in managing incidents that concern Personally Identifiable Information (PII). Co3's Security Module extends the capability to manage response to security events such as malware infections, phishing-related compromise, Distributed Denial of Service (DDoS) attacks, device or Intellectual Property theft and system intrusions. Together, the Modules provide the most comprehensive solution to prepare, assess, manage and mitigate privacy breaches and security incidents.