✳ Learn / Jurisdiction explainers

Name the rule. Do not pretend it is a badge.

These pages teach who a U.S. federal rule commonly frames, and what security people mix up. They are not determinations, and they do not live inside the privacy-versus-security lesson.

US-federal · HIPAA

HIPAA Security Rule: who it frames, and what security people confuse

An educational overview of the U.S. federal HIPAA Security Rule: electronic protected health information, covered entities, and business associates. Not a coverage determination.

Read the explainer ↗

US-federal · FERPA

FERPA: education records obligations security people confuse

An educational overview of U.S. federal FERPA: which schools the Department of Education's FAQ says it reaches, and what security people often mix up. Not a coverage determination.

Read the explainer ↗

Privacy is not a CIA checkboxstays the boundary habit. Sector rules stay here.

Find your next idea.

Tip: press / to open search. Escape closes this window.