Resources · Compliance

Mobile cybersecurity compliance

Data handling is increasingly governed by regulations across the world. Explore the most important laws, regulations and recommendations on the privacy of data processed through mobile devices and applications.

To find out how your organization can become compliant, talk to one of our experts.

Six defining texts for organizations operating in Europe.

Europe

ISO 27001:2022

The international reference standard for information security management systems (ISMS). It governs the protection of any information stored or processed by the organization.

Get compliantEurope

RGPD

European regulation on personal data protection, applicable to any organization doing business in Europe, wherever it is located.

Get compliantEurope

NIS2

European directive designed to protect essential and important entities against cyber threats, with reinforced risk management obligations.

Get compliantEurope

DORA

European regulation aimed at keeping the financial sector resilient in the face of major operational disruptions, with demanding technical standards.

Get compliantEurope

Cyber Resilience Act

The European regulation imposing cybersecurity requirements on digital products, including mobile applications.

Get compliantEurope

PSD2

European directive that regulates payment services and encourages financial innovation. It mandates strong authentication and secure data transmission.

Get compliantUnited Kingdom

DPA

The United Kingdom's data protection legislation. After Brexit it replaced the GDPR in the UK while largely retaining its principles.

Get compliant

The texts that apply in the United States and Canada.

United States

HIPAA

US regulation protecting the confidentiality and security of individuals' health information (PHI — Protected Health Information).

Get compliantUnited States

CISA mobile checklist

The Cybersecurity and Infrastructure Security Agency provides a checklist to help individuals and organizations strengthen the security of their devices.

Get compliantCanada

PIPEDA

Canada's federal privacy law, governing the collection, use and disclosure of personal information.

Get compliantUnited States

FTC Act

Grants the Federal Trade Commission the authority to enforce fair business practices and protect consumer privacy.

Get compliant

The sector frameworks that apply across borders.

International

PCI DSS

The PCI Security Standards Council defines, evolves and promotes security standards for organizations handling payment card data.

Get compliantInternational

SOC 2

A standard from the American Institute of Certified Public Accountants (AICPA) assessing how service providers manage data security, availability and confidentiality.

Get compliant