Bummer! This is just a preview. You need to be signed in with a Basic account to view the entire video.

Preview

Start a free Basic trial
to watch this video

Sign up for Treehouse

Compliance Overview for Web Developers

2:21 with Alena Holligan and Jared Smith

When dealing with certain kinds of sensitive data, the word “compliance” tends to pop up. Compliance revolves around standards put in place by governments and organizations around the world that limit the things you can do with certain types of data you might use on your site.

Further Reading

  • 0:00

    When dealing with certain kinds of sensitive data,

  • 0:03

    the word compliance tends to pop up.

  • 0:06

    Compliance revolves around standards put in place by governments and

  • 0:10

    organizations around the world

  • 0:13

    that limit the things that you're allowed to do with certain types of data.

  • 0:18

    We're not going to dive into these compliance issues in-depth, but you should

  • 0:22

    be aware of them when you work with any application that deals with customer data.

  • 0:27

    If you are ever concerned about compliance or

  • 0:30

    the handling of customer data, you should always consult with legal counsel.

  • 0:36

    Briefly, let's go over the main forms of compliance that you may encounter.

  • 0:41

    PCI stands for Payment Card Industry Data Security Standard, and

  • 0:46

    concerns the handling of credit card information and payment information.

  • 0:51

    If you handle credit card or debit card information, then you need to be concerned

  • 0:56

    with how you handle this data, including its storage, processing, and transmission.

  • 1:02

    HIPAA, the Health Insurance Portability and Accountability Act of

  • 1:08

    1996 is a US legislation that provides data privacy and

  • 1:12

    security provisions for safeguarding medical information.

  • 1:17

    COPPA is a Children's Online Privacy Protection rule, and

  • 1:21

    imposes certain requirements on websites and

  • 1:25

    online services directed to children under 13 years of age.

  • 1:30

    This affects all online services that knowingly collect personal

  • 1:34

    information from a child under 13 years of age.

  • 1:38

    GDPR, the General Data Protection Regulation,

  • 1:42

    was put forth by the European Union to strengthen and

  • 1:45

    unify data protection for all individuals within the European Union.

  • 1:52

    You can learn more about each of these guidelines through the resources in

  • 1:55

    the teacher's notes.

  • 1:57

    These compliance guidelines are a minimum requirement and

  • 2:00

    should not be used to determine if your application is actually secure.

  • 2:05

    You could be meeting these guidelines while still having an application

  • 2:09

    with security vulnerabilities.

  • 2:11

    Compliance is a complicated subject, and many other regulations exist.

  • 2:17

    Though the ones we have just discussed are the ones you're most likely to encounter.

You need to sign up for Treehouse in order to download course files.

Sign up