Frequently asked questions

A news site for regulatory compliance, privacy and security standards. It collects reporting from regulators, trade publications and community sources and groups coverage of the same event into one story.

Our pipeline checks sources several times a day. When a new article covers an event we already have — same organisation, same action, around the same time — it is added to that story as another source instead of becoming a duplicate.

Official sources are regulators and government bodies. Trade press are specialist compliance, legal and security publications. Community sources are blogs, forums and reader submissions. More on how we rate sources.

HIPAA, GDPR, NIST CSF, ISO 27001, SOC 2, PCI-DSS, DORA, CCPA (including CPRA) and India’s Digital Personal Data Protection Act, 2023 with the DPDP Rules, 2025.

They’re drafted automatically from the source articles under our editorial policy; stories marked “Reviewed by an editor” were also checked by a person. They’re a starting point, not legal advice — read the original before acting.

ISO 27001 and SOC 2 audits ask for evidence that you monitor regulatory changes and assess whether they affect you. Mark any story as “applies”, “monitoring” or “no action”, add a note, and your watch log exports that record as CSV or a printable PDF — per client, if you advise several.

The week’s most important stories for the frameworks you follow, new fines, and deadlines in the next 30 days — one short email. See a sample.

From the fines and penalties reported in our stories. The enforcement tracker lets you search them by organisation, regulator, country, violation and sector and export the results.

Yes. Signed-in members can submit a link. A moderator reviews every submission before it appears in the feed.

Yes. Reading is open to everyone; a free account lets you upvote, comment, save stories and follow frameworks.