• License #1116987
  • DIR Public Works Reg. PW-LR-1001158430

Resources & Blog

Showing Audits posts -- view all posts

Conceptual editorial laboratory scene with sample racks, a scientific instrument and a quality specialist reviewing records.

21 CFR Part 11 for San Diego Biotech: A Practical Electronic Records Readiness Guide

Plan 21 CFR Part 11 readiness for San Diego biotech and life sciences teams: electronic records, audit trails, signatures, validation evidence and next steps.

READ MORE

California Video Surveillance Compliance: CCPA, Penal Code 632, and Camera Placement Law

A security camera in California isn't just a hardware purchase -- it's exposure under CCPA/CPRA privacy law, Penal Code 632's all-party audio consent rule, and Penal Code 647(j)'s placement restrictions, all at once, and most systems have never been checked against any of them.

READ MORE

OCR's HIPAA Right of Access Initiative: The 5-Point Checklist Senior Living Operators Need

A separate, currently very active OCR enforcement lane has nothing to do with hacking — it's about how fast a covered entity hands over a patient's or resident's own records, and it now carries three overlapping deadlines for California senior living and healthcare-adjacent operators.

READ MORE

AI Ambient Scribes and California Wiretap Law: Why Your HIPAA Risk Assessment Needs an Update

A wave of 2025-2026 California class actions accuses Sharp HealthCare, Sutter Health, and MemorialCare of recording patient visits with AI ambient scribes without proper consent -- exposing a gap between HIPAA compliance and California's strict wiretap and medical confidentiality laws that any practice using this technology needs to close first.

READ MORE

Cyber Insurance Readiness Assessments: Why MFA and EDR Gaps Are Costing California Businesses Their Coverage

Cyber insurers spent 2025 turning enforced MFA, monitored EDR, and tested backups from questionnaire checkboxes into binding conditions -- and NAIC data shows three out of every four U.S. cyber insurance premium dollars now flow through the non-admitted surplus lines market instead of standard coverage.

READ MORE

Shadow AI Usage Audits: The Compliance Risk Nobody Is Auditing Yet

Shadow AI is running inside 98% of organizations and shows up in the majority of related data breaches, yet almost nobody audits it. Here's the real data behind the risk and what a shadow AI usage audit actually covers for California businesses.

READ MORE