Plain-language self-assessment checklists for regulations and policies. Each question points to its source, so you can review whether the controls a policy expects are in place. A checklist is a review aid, not legal advice or a certification.
4 checklists · Browse the Policy Library for the obligations behind them.
California Consumer Privacy Act of 2018
A draft self-assessment prepared from the researched requirements of California Consumer Privacy Act of 2018. Every question is unconfirmed: review the wording and citations before publishing.
Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003
Practical Yes/No/Not applicable questions based on the federal CAN-SPAM Act, FTC Rule, and FCC wireless-message requirements. This is an internal self-assessment aid, not a legal determination or certification.
Security Standards for the Protection of Electronic Protected Health Information
A practical, source-linked self-assessment based on the associated research requirements. Administrator approval is required before publication.
Standards for Privacy of Individually Identifiable Health Information
A practical, source-linked self-assessment based on the associated research requirements. Administrator approval is required before publication.
This checklist is a self-assessment tool provided for information. It is not legal advice, and completing it does not certify, verify or guarantee compliance with any law or regulation. Review dates you set are your own and are not legal deadlines.
