Resource Library

This Privacy Capability Maturity Model provides a detailed maturity model for all aspects of an organization’s privacy program, including its use of Artificial Intelligence (AI) and Machine Learning (ML) using personal information.

It seeks to gauge program capability across a variety of program elements, taking a “big picture” view on an organization’s readiness to comply with these requirements.

The ACC Records Management Program Maturity model provides a detailed maturity model for all aspects of an organization’s records program.

It seeks to gauge program effectiveness across a variety of program elements, taking a “big picture” view to increase program value.

It can be costly to hold on to information that is obsolete, expired, either legal, regulatory, and not needed for or business reasons.  An organization must determine what needs to be saved (meaning, it can identify what can be disposed). Policies can be developed that include both the business justification and process for deleting electronic documents, and establish consistent, repeatable, defensible processes that allow for the routine deletion of data not under a legal hold.

The European Union has approved a new framework for transferring personal data between Europe and the US. This is a major development that could resolve the current legal limbo for transatlantic data transfers. 

This checklist provides practical steps for your privacy, legal, and compliance teams to asses whether this Virginia Consumer Data Protection Act (VCDA) applies to your organization's data and provide tips for your organization to become compliant.

This whitepaper provides an overview of the most important provisions of the NIS2 Directive, also known as the new version of the Network and Information Security Directive. NIS2 is a European directive aimed at strengthening cybersecurity in the European Union (EU).

Learn about the significant implications (for data users and holders) of the Data Act proposed by the European Commission in February 2022, regarding who can use and access data generated by connected devices.

Deleting emails and files is a type of initiative that looks easy at the outset but become difficult. Emails and files are retained, and month after month, can quickly year after year they accumulate creating digital layers called information horizons. These information horizons contain a little bit of everything: records, non-records, copies containing high-value value information, personal information, intellectual property, and even documents subject to legal hold.

Learn tips for adapting to the new standard contractual clauses adopted by the European Commission on June 7, 2021, for international transfers of data.

In this ACC Guide, learn why letting electronic information accumulate can be hurtful, and why deleting it can be difficult. The guide  reviews several deletion approaches that are ineffective and highlights those approaches that work well. These smart strategies will enable companies to create effective programs that ensure compliance, reduce risk, lower costs, and increase productivity.