Regulations, Standards and Frameworks

Free CPA ISC (Information Systems & Controls) lesson in Security, Confidentiality and Privacy. 36 min read, ~5,390 words.

HIPAA applies to covered entities (health plans, healthcare clearinghouses, healthcare providers transmitting electronically) plus business associates via BAAs; permitted disclosures cover treatment, payment, operations, and specific public interest exceptions. GDPR applies to processing personal data of EU residents regardless of processor location; six principles: lawfulness/fairness/transparency, purpose limitation, data minimization, accuracy...

What this lesson covers

• Content
• Example 1
• Example 2
• Example 3
• Example 4
• Example 5
• Example 6
• Example 7
• Example 8
• Example 9
• Example 10
• Common Mistakes
• Check Your Understanding
• Exam Shortcuts

Learning objectives

• II.A1

Browse all free CPA ISC lessons or jump into free CPA ISC practice questions.