All terms

Reasonable security safeguards

The protections a business must put around personal data.

The Act requires reasonable security safeguards to prevent breaches, including at vendors. The Rules list measures such as encryption or masking, access control, logs and backups.

Failing at this is the breach with the highest maximum penalty in the Act.

Plain-language explanation, not legal advice.

Find out where your website stands

A free, read-only scan with plain-language findings you can act on.