As data privacy regulations spread internationally and nationally, companies can’t hide from privacy risk management. If a company didn’t fall under the General Data Protection Regulation’s scope, it may still likely be regulated by the California Consumer Privacy Act or other potential copycat data privacy laws brewing in state legislatures. 

In an effort to encourage privacy awareness, last week the National Institute of Standards and Technology (NIST) released a privacy framework toolkit for holistically addressing their privacy needs, concerns and goals.