Vendor Risk Management Guide - How to Manage Vendors and Third Parties to Minimize Privacy and Security Risks

Risks related to vendors are of growing concern particularly when it comes to data privacy. International and U.S. privacy laws and regulations like CCPA, GDPR and HIPAA have specific provisions that address vendors and extend companies' data privacy obligations throughout their supply chains. Effective vendor management and risk mitigation are essential to support compliance and to avoid potential data breaches and consequences of non-compliance (i.e., fines, brand damage, loss of customer trust, etc.)\r
\r
This document is intended as a general overview of the subject and the information was based on the state of the market on the date the document was published.