[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:compliance-automation":3},{"control":4,"products":25,"stories":38,"lessons":82,"related":107,"compare":108},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.","Software that maps your controls to frameworks, collects evidence automatically from your systems, tracks risks and tasks, and shows where the gaps are.","Compliance work run in spreadsheets is slow, error-prone and drifts away from reality. Automation cuts audit preparation and, more importantly, shows management where controls are actually failing, which is what NIS2 Art. 20 expects them to oversee.",[11,12,13,14],"Which frameworks are supported out of the box, including NIS2 and DORA?","Which of our systems can it collect evidence from automatically?","Does it include a risk register and supplier management, or only control checklists?","Can auditors get read access directly?","Risk: compliance gaps stay unknown to management until an audit or an incident. Control: GRC platform with automated evidence and a live risk register. Owner: GRC lead. Measure: controls with current evidence.",[17,18,19,20],"NIS2 Art. 20 and 21(2)(a): governance and risk analysis policies","DORA Art. 5 and 6: governance and the ICT risk management framework","ISO\u002FIEC 27001:2022 clauses 6 and 9: risk treatment and performance evaluation","NIST CSF 2.0 Govern function",{"name":22,"slug":23},"Regulatory Compliance","regulatory-compliance","2026-10-16T12:48:28.443241+00:00",[26,32],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":27,"product_name":28,"url":30,"description":31},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",{"vendor_slug":33,"vendor_name":34,"vendor_logo":35,"product_slug":33,"product_name":34,"url":36,"description":37},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",{"total":39,"last_days":40,"recent":41},247,87,[42,47,52,57,62,67,72,77],{"slug":43,"title":44,"published_at":45,"brief":46},"aepd-spain-ps-00372-2025-a62200","AEPD (Spain) - PS\u002F00372\u002F2025","2026-11-11T10:57:14+00:00","Spain's AEPD fines employer for improper biometric data processing.",{"slug":48,"title":49,"published_at":50,"brief":51},"defense-and-aerospace-firm-settles-with-government-over-allegedly-failing-to-mee-ae5399","Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements","2026-11-03T21:49:51+00:00","Defense firm ILC settles with US government for $13M over cybersecurity contract failures.",{"slug":53,"title":54,"published_at":55,"brief":56},"hdpa-greece-19-2026-760dcc","HDPA (Greece) - 19\u002F2026","2026-11-03T14:45:54+00:00","Greece's HDPA fines a company €100,000 for failing to respond to a data subject access request.",{"slug":58,"title":59,"published_at":60,"brief":61},"nis2-makes-board-members-personally-liable-for-access-control-decisions-5ead9d","NIS2 Makes Board Members Personally Liable for Access Control Decisions","2026-11-03T07:21:16+00:00","NIS2 Article 20 makes board members personally liable for cybersecurity controls they approve.",{"slug":63,"title":64,"published_at":65,"brief":66},"garante-per-la-protezione-dei-dati-personali-italy-747-2026-b3d3be","Garante per la protezione dei dati personali (Italy) - 747\u002F2026","2026-11-02T15:54:32+00:00","Italian DPA fines Deutsche Bank and Poste Italiane for GDPR violations related to data processing.",{"slug":68,"title":69,"published_at":70,"brief":71},"anspdcp-romania-fine-against-hayat-medical-and-dental-s-r-l-f34778","ANSPDCP (Romania) - Fine against HAYAT MEDICAL and DENTAL S.R.L","2026-11-02T14:13:14+00:00","Romania's ANSPDCP fines HAYAT MEDICAL and DENTAL S.R.L €5,000 for GDPR violations.",{"slug":73,"title":74,"published_at":75,"brief":76},"cnil-france-san-2026-015-3ce079","CNIL (France) - SAN-2026-015","2026-11-02T10:30:10+00:00","France's CNIL fines FNAC DARTY PARTICIPATIONS ET SERVICES €6m and FNAC DIRECT €1m for illegal user tracking.",{"slug":78,"title":79,"published_at":80,"brief":81},"doj-raises-privacy-concerns-over-potential-sale-of-character-ai-chats-648e90","DOJ raises privacy concerns over potential sale of Character.AI chats","2026-10-30T20:45:00+00:00","DOJ seeks privacy protections for Character.AI users amid potential sale of company data.",[83,87,91,95,99,103],{"slug":84,"title":85,"published_at":86},"biometric-time-tracking-system-deployed-without-mandatory-dpia","Biometric Time-Tracking System Deployed Without Mandatory DPIA","2026-11-11T11:20:22.657+00:00",{"slug":88,"title":89,"published_at":90},"defense-contractor-pays-13m-for-failing-cybersecurity-contract-obligations","Defense Contractor Pays $13M for Failing Cybersecurity Contract Obligations","2026-11-03T22:20:22.644+00:00",{"slug":92,"title":93,"published_at":94},"greek-dpa-fines-teleperformance-100k-for-failing-to-honour-data-subject-access-request","Greek DPA Fines Teleperformance €100K for Failing to Honour Data Subject Access Request","2026-11-03T15:20:23.357+00:00",{"slug":96,"title":97,"published_at":98},"nis2-holds-boards-personally-liable-for-access-control-failures","NIS2 Holds Boards Personally Liable for Access Control Failures","2026-11-03T08:21:49.503+00:00",{"slug":100,"title":101,"published_at":102},"romanian-dpa-fines-dental-clinic-for-unlawful-data-processing-and-non-cooperation","Romanian DPA Fines Dental Clinic for Unlawful Data Processing and Non-Cooperation","2026-11-02T16:23:30.88+00:00",{"slug":104,"title":105,"published_at":106},"poste-italiane-deutsche-bank-fined-48000-for-misaligned-data-roles-and-opaque-privacy-notices","Poste Italiane & Deutsche Bank Fined €48,000 for Misaligned Data Roles and Opaque Privacy Notices","2026-11-02T16:21:53.151+00:00",[],{"vanta\u002Fvanta":109,"drata\u002Fdrata":120},{"hq_country":110,"also_provides":111,"reviews":112,"affected":119,"reported":119},"US",[],[113,116],{"label":114,"url":115},"PeerSpot: Vanta user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fvanta-reviews",{"label":117,"url":118},"Gartner Peer Insights: Vanta user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fvanta-859163126",0,{"hq_country":110,"also_provides":121,"reviews":122,"affected":119,"reported":119},[],[123,126],{"label":124,"url":125},"PeerSpot: Drata user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fdrata-reviews",{"label":127,"url":128},"Gartner Peer Insights: Drata user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fdrata-1160371870"]