Compliance Pointers

In the McLaughlin case, SCOTUS ruled that federal district courts are not bound to follow FCC interpretations of the #TCPA in private lawsuits. Tony Jarnigan joined Compliance Pointers to explain the impact the case has already had and how it could change the telemarketing litigation landscape in the future. Watch the complete episode to learn: 👨‍⚖️ Details of the McLaughlin ruling 👨‍⚖️ Conflict...

Being issued a new ISO certificate is certainly a milestone, but it's just the beginning. When applied correctly, implementing standards like ISO 27001, ISO 27701, and ISO 42001 should influence overall business operations, like regular KPI reporting, too. David Forman, CEO at Mastermind, joined Compliance Pointers to explain how some of his team’s clients get the most value from their management...

Many businesses are using GRC tools to prepare for audits and improve the overall efficiency of their compliance programs. Brandon Breslin joined Compliance Pointers to explain how organizations can identify the best tool for them and maximize its value. Watch the entire episode to learn about: 🔧 Considerations when selecting a GRC tool 🔧 Benefits of leveraging GRC tools 🔧 Effective implementat...

Penetration testing is an important element of a cybersecurity program. Pen testing is also a compliance requirement for standards like HIPAA, PCI, and FISMA. There are some common mistakes businesses make that can hurt the efficiency and effectiveness of a test. We break down these mistakes on the latest episode of Compliance Pointers. Click the link in the comments to see the entire episode and...

What are the most important items to look for when reading a SOC 2 report? Carol Amick joined Compliance Pointers to answer that question. Watch the entire episode and learn about: 📃 The key components - management's assertion, controls, and exceptions 📃 Analyzing the controls 📃 Understanding exceptions 📃 Verifying the quality of the report Learn more about CompliancePoint's SOC 2 services at:...

Michael Young, a partner at Morris, Manning, and Martin, who focuses on the intersection of data, tech, privacy, and cybersecurity, joined Compliance Pointers to break down AI laws that are in effect at the state level. Watch the complete episode to learn about: ⚖️ Existing state laws and their requirements ⚖️ The risks those laws create for businesses implementing #artificialintelligence into pro...

The number of TCPA lawsuits continues to increase in 2025. Alexandra Krasovec, Partner at Manatt, Phelps & Phillips, LLP, who specializes in TCPA cases, joined Compliance Pointers to give us an insider look at what’s currently driving these cases. Watch the entire episode to hear Alex’s take on: ⚖️ The most common violations plaintiffs are leveraging for suits ⚖️ Identifying and managing the r...

Where do organizations with HITRUST certification plans begin? We answer that question in this episode of Compliance Pointers. Listen to the entire episode to learn more about: ✅ Choosing the Right HITRUST Certification ✅ The Role of a HITRUST Auditor ✅ Selecting the Right Audit Partner ✅ Preparing for Your HITRUST Assessment Learn more about CompliancePoint's HITRUST certification services at...

Cookie functionality is a key to GDRR, CCPA, and other state privacy law #compliance. Proper cookie configuration can be technically challenging. Michael Nadeau joined Compliance Pointers to share his cookie expertise. Listen to the entire episode to learn more about: 🍪 Cookie requirements for privacy law compliance 🍪 The most common implementation challenges 🍪 Opt-in vs opt-out environments 🍪...

For organizations working towards SOC 2 compliance for the first time, the journey can seem daunting. Carol Amick joined Compliance Pointers to break down the SOC 2 essentials. Watch the entire episode to learn about: ☑️ Defining a scope ☑️ The AICPA Trust Service Principles ☑️ Combining SOC 2 with other infosec frameworks ☑️ Designing controls ☑️ What happens if you can't demonstrate compliance w...

CANSPAM and state email laws are an often-overlooked aspect of marketing compliance. A recent ruling against Old Navy in the Washington State Supreme Court shows there are risks to violating email laws. Tony Jarnigan joined Compliance Pointers to break down email regulations and best practices. Watch to learn about: 📧 The relationship between CAN-SPAM and state email laws 📧 The Old Navy case &am...

Two CCPA enforcements have been issued recently. Both fines largely stemmed from #privacy and consent functionality on the company’s websites. Matt Dumiak joined Compliance Pointers to discuss the lessons everyone can learn from these penalties. Listen to the entire episode to learn about: 💻 The Honda violations 💻 Third-party privacy management software risks 💻 The mistakes made regarding delet...

As the adoption of #AI continues to expand rapidly, ISO 42001 certification will become more valuable for businesses. In this episode of Compliance Pointers, Brandon Breslin explains how organizations can leverage their existing ISO 27001 certification to accelerate their ISO 42001 compliance efforts. Watch the complete episode to learn: The overlaps in 27001 and 42001 compliance Artificial Intell...

In this episode of Compliance Pointers, Senior Marketing Compliance Consultant Megan Rose breaks down the impact of recent rulings regarding the FCC’s One-to-one Consent and Consent Revocation rules. She also explores the spike in TCPA lawsuits stemming from calling times violations. Learn more about CompliancePoint's Marketing Compliance services at: https://www.compliancepoint.com/services/marke...

Healthcare organizations have specific cybersecurity needs and challenges alongside their obligations to comply with laws like HIPAA. Security Consultant Alec Harrell joined Compliance Pointers to share how organizations can align their cybersecurity controls with their healthcare compliance needs. Listen to the entire episode to learn: 🏥 Why cybersecurity can be extra challenging for healthcare...

HHS has undergone significant changes under the Trump Administration and Secretary Kennedy. Sarah Reckling joined Compliance Pointers to give her perspective on: ⚕️ How HHS has changed ⚕️ The impact on HIPAA investigations ⚕️ Security rule status ⚕️ How healthcare organizations should account for the changes Learn more about CompliancePoint's healthcare and HIPAA services at https://www.compliance...

Medical devices can increase the risk of cyberattacks and data breaches involving PHI for healthcare organizations. Carol Amick, Director of Healthcare Services, joins Compliance Pointers to help organizations better understand: ⚕️ The types of devices that create risk ⚕️ Why those devices create risk ⚕️ How to mitigate risks ⚕️ Incident response and device management strategies Learn more about C...

Fresh on the heels of the PCI Security Standards Council releasing guidance on integrating #AI into PCI assessments, Brandon Breslin joins Compliance Pointers to discuss how organizations with PCI goals can leverage AI. Listen to the complete episode and hear Brandon’s perspective on: 💳 Benefits and risks of AI in PCI assessments 💳 Addressing data sensitivity and accuracy concerns 💳 Creating an...

Milou Meier, Founder of Compliance Counsel, is this week’s guest on Compliance Pointers. She gives her thoughts on how the new administration’s emphasis on deregulation will impact businesses’ cybersecurity efforts. Listen to the complete episode to hear Milou’s perspective on: 🔒 How the cybersecurity landscape is changing 🔒 Where businesses can turn for guidance 🔒 Regulation expectations at th...

Clark Haynes, Head of IT at Modere, brings his 30 years of technology experience to Compliance Pointers. In this episode, Clark shares what he’s learned about: • Building a culture of security and privacy • Leveraging NIST • Providing employees with the right #cybersecurity training • Using AI and managing its risks Learn more about Modere at https://www.modere.com/ Learn more about CompliancePoin...

Darlene Geller-Stoff , VP of Litigation Support Services at CompliancePoint , brings her 30 years of experience to Compliance Pointers. Listen to the entire episode to learn about the trends she is seeing in TCPA and Telemarketing litigation, including: ☎️ What’s behind a spike in reassigned numbers cases ☎️ How businesses can defend themselves from these cases ☎️ Other litigation trends, includin...

In a special episode of Compliance Pointers, Jordan chats with Tamara Lauterbach , Cybersecurity Manager at Guthrie about her journey through the cyber industry, common challenges she’s encountered, and strategies to overcome those challenges. Watch or listen to the complete episode to hear what Tamara has learned in her career about: • Building a culture of security • Pursuing #HITRUST • The impo...

What should your privacy program be focused on in 2025? Matt Dumiak shares his top privacy priorities for regulatory compliance, operations, and risk mitigation in the latest episode of Compliance Pointers? Listen or watch to learn what your organization should be doing about: Data Privacy Impact Assessments AdTech Safeguarding Protected Health Information Children’s data and #COPPA compliance Web...

ISO expert David Forman, Founder at Mastermind, joins us for another episode of Compliance Pointers. David explains what organizations should look for when searching for a readiness partner. Watch or listen to the entire episode to uncover: 🔎 Qualities to prioritize when evaluating readiness partners 🔎 When it makes sense to outsource your internal audit 🔎 Red flags associated with inexperience...

CompliancePoint Exchange, a new event dedicated to marketing compliance and data privacy, is happening March 11-12 in Orlando. Matt Cagle joined Compliance Pointers to give an in-depth look at CPX, including info on the scheduled sessions, presenters, and some fun events planned. Learn more about CPX and register here: https://www.compliancepoint.com/cpx/