Hacker News new | ask | show | jobs
by victorkab 2240 days ago
No problem!

Yes, earning trust is the most important piece. However, organizations are excited to participate once you show that you are the right security & privacy practices in place. We've had a lot of great momentum there.

For regulatory frameworks, it depends on the circumstances and the type of data that you are dealing with. For most of our use cases, it's:

* FCRA, aka Fair Credit Reporting Act that all Credit Reporting Agencies must follow.

* HIPAA, for health data

Of course, you have more generic frameworks such as CCPA, GDPR but that's true for all companies.