Pluralsight Data Governance Privacy Security and Regulatory Compliance 2026 [EN]

GDPR, because German patients’ personal data was exposed. HIPAA: notify affected US individuals and HHS within 60 days of discovery. Assess: confirm exactly whose data and which fields; run HIPAA’s risk assessment and GDPR’s risk evaluation; get per-state counts. Had the spreadsheet been encrypted to standard, the PHI would have been “secured,” and HIPAA’s breach notification would generally not be triggered. Pair that with data minimization (why export 1,200 full records to a laptop at all?) an