Regulators are focusing more and more on how responsible organizations are when engaging third-party vendors.  HIPAA has in place requirements for engaging business associates.  The Connecticut Department of Insurance has requirements for reporting breaches caused by vendors.  And, the Massachusetts Attorney General, through the Data Security Regulations, requires oversight of third-party service providers.  This is … Continue Reading