AI Governance Meets Compliance – How AI Is Reshaping PCI, SOC 2, HITRUST, and ISO 27001

By Brandon Breslin | March 5, 2026

AI is rapidly moving inside the enterprise control environment. As organizations embed AI into operational decisions, security programs, and regulated…

PlayOn Sports Fined for CCPA Violations

By Matt Dumiak | March 4, 2026

The California Privacy Protection Agency (CPPA) fined PlayOn Sports $1.1 million for CCPA violations. PlayOn Sports designs platforms for high…

Courts Continue to Dismantle the FCC’s TCPA Playbook: 5th Circuit Rules Written Consent Not Required for Prerecorded Calls

By Tony Jarnigan | February 26, 2026

Federal courts continue to dismantle key Federal Communications Commission (FCC) interpretations of the Telephone Consumer Protection Act (TCPA). First, federal…

Alphv/BlackCat Ransomware Settlements Costing Healthcare Organizations Millions

By Sarah Reckling | February 20, 2026

The Alphv/BlackCat ransomware gang was one of the most active and damaging in the last several years. Before the FBI…

The Compliance & Cyber Chronicles: Why NIST CSF and CIS are a Great Match

By Steve Haley | February 17, 2026

How two leading frameworks align to reduce risk, simplify compliance, and support smarter security investments for the SMB. Welcome to…

The Connecticut Privacy Law 2025 Enforcement Report

By Matt Dumiak | February 17, 2026

The Connecticut Office of the Attorney General (OAG) released its Connecticut Data Privacy Act (CTDPA) 2025 Enforcement Report. This is…

Michigan SB 351: What the New Telephone Solicitation Act Means for Businesses

By Kara Urbaniak | February 13, 2026

As part of an effort to update the state’s telemarketing rules and strengthen consumer protections against unwanted calls and texts,…

Disney Fined $2.75M for CCPA Violations

By Matt Dumiak | February 13, 2026

California Attorney General Rob Bonta announced a $2.75 million settlement with Disney for violating the California Consumer Privacy Act (CCPA).…

How Organizations Successfully Build Security and Compliance Programs

By Brandon Breslin | February 9, 2026

For many organizations, the compliance journey does not start with an audit or a certification goal. It starts much earlier…

What PCI SSC’s 2025 Annual Report Means for Our Clients – A QSA Perspective

By Brandon Breslin | February 9, 2026

The PCI Security Standards Council (PCI SSC) recently published its first-ever Annual Report, offering transparency into how PCI standards are…

Finding a credible expert with the appropriate background, expertise, and credentials can be difficult. CompliancePoint is here to help.