Examkin

Question

Difficulty: EasyRegulatory Compliance and Legal Requirements Management

Match each regulatory framework or standard to its primary compliance mandate.

  • Payment Card Industry Data Security Standard (PCI DSS)Mandates technical and administrative safeguards to protect cardholder data during transaction processing and storage.
  • Health Insurance Portability and Accountability Act (HIPAA)Establishes security and privacy rules to safeguard Protected Health Information (PHI).
  • General Data Protection Regulation (GDPR)Enforces data privacy rights and explicit consent requirements for processing personal data of individuals in the EU.
  • Sarbanes-Oxley Act (SOX)Requires public companies to maintain strict internal financial controls and audit log integrity.

Answer

PCI DSS matches cardholder data protection; HIPAA matches Protected Health Information (PHI) safeguards; GDPR matches EU personal data privacy rights; SOX matches corporate financial reporting and internal audit controls.
Each regulatory framework targets a distinct sector or data classification: PCI DSS protects cardholder data, HIPAA protects healthcare PHI, GDPR protects EU personal privacy rights, and SOX regulates public company financial accounting and audit logging.

Step-by-Step Solution

1
Identify the primary domain governed by PCI DSS.
PCI DSS focuses specifically on securing payment card transactions and credit/debit cardholder data.
Merchants and payment gateways must comply with PCI DSS to prevent payment fraud.
2
Identify the primary focus of HIPAA.
HIPAA establishes privacy and security rules for medical records and health data (PHI).
Healthcare providers must secure patient data under US federal regulations.
3
Identify the scope of GDPR.
GDPR governs privacy, consent, and rights regarding personal data for EU data subjects.
It applies broadly to any entity processing personal data of EU residents.
4
Identify the mandate of SOX.
SOX regulates financial record integrity, log retention, and internal auditing for publicly traded corporations.
It prevents accounting fraud and ensures transparency in corporate disclosures.

Key Concept

Regulatory Framework Mandates and Compliance Data Scope
Rate this question

Topics

Regulatory Compliance and Legal Requirements Management

More questions from this topic