[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:compliance-automation":3},{"control":4,"products":25,"stories":38,"lessons":82,"related":107,"compare":108},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.","Software that maps your controls to frameworks, collects evidence automatically from your systems, tracks risks and tasks, and shows where the gaps are.","Compliance work run in spreadsheets is slow, error-prone and drifts away from reality. Automation cuts audit preparation and, more importantly, shows management where controls are actually failing, which is what NIS2 Art. 20 expects them to oversee.",[11,12,13,14],"Which frameworks are supported out of the box, including NIS2 and DORA?","Which of our systems can it collect evidence from automatically?","Does it include a risk register and supplier management, or only control checklists?","Can auditors get read access directly?","Risk: compliance gaps stay unknown to management until an audit or an incident. Control: GRC platform with automated evidence and a live risk register. Owner: GRC lead. Measure: controls with current evidence.",[17,18,19,20],"NIS2 Art. 20 and 21(2)(a): governance and risk analysis policies","DORA Art. 5 and 6: governance and the ICT risk management framework","ISO\u002FIEC 27001:2022 clauses 6 and 9: risk treatment and performance evaluation","NIST CSF 2.0 Govern function",{"name":22,"slug":23},"Regulatory Compliance","regulatory-compliance","2026-10-16T12:48:28.443241+00:00",[26,32],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":27,"product_name":28,"url":30,"description":31},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",{"vendor_slug":33,"vendor_name":34,"vendor_logo":35,"product_slug":33,"product_name":34,"url":36,"description":37},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",{"total":39,"last_days":40,"recent":41},224,88,[42,47,52,57,62,67,72,77],{"slug":43,"title":44,"published_at":45,"brief":46},"norwegian-dpa-fines-xandr-eur-8-600-000-for-unlawful-processing-of-personal-data-d1fefb","Norwegian DPA fines Xandr EUR 8 600 000 for unlawful processing of personal data","2026-10-16T07:52:03+00:00","Norwegian DPA fines Xandr EUR 8.6M for unlawful processing of sensitive personal data.",{"slug":48,"title":49,"published_at":50,"brief":51},"garante-per-la-protezione-dei-dati-personali-italy-710-2026-1db143","Garante per la protezione dei dati personali (Italy) - 710\u002F2026","2026-10-14T08:11:18+00:00","Italy's DPA fines IQVIA €7M for GDPR violations after patient data breach.",{"slug":53,"title":54,"published_at":55,"brief":56},"datatilsynet-norway-20-03541-37-a3294f","Datatilsynet (Norway) - 20\u002F03541-37","2026-10-13T14:26:00+00:00","Norway's Datatilsynet fines Xandr €8.5M for unlawful processing of Grindr user data.",{"slug":58,"title":59,"published_at":60,"brief":61},"xandr-fined-a-record-8-6-million-for-relaying-grindr-data-revealing-sexual-orien-88ba1d","Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation","2026-10-13T13:12:32+00:00","Xandr fined €8.6M for illegally relaying Grindr users' sensitive data.",{"slug":63,"title":64,"published_at":65,"brief":66},"norway-fines-microsoft-ad-firm-9-6-million-over-grindr-data-sharing-1507a8","Norway fines Microsoft ad firm $9.6 million over Grindr data sharing","2026-10-12T20:13:52+00:00","Norway fines Microsoft ad firm Xandr $9.6M for unlawful Grindr user data sharing.",{"slug":68,"title":69,"published_at":70,"brief":71},"italian-dpa-fines-wind-tre-eur-16-700-000-for-unlawful-telemarketing-and-data-pr-452590","Italian DPA fines Wind Tre EUR 16 700 000 for unlawful telemarketing and data protection infringements","2026-10-12T11:26:51+00:00","Italian DPA fines Wind Tre EUR 16.7M for unlawful telemarketing and data protection infringements.",{"slug":73,"title":74,"published_at":75,"brief":76},"privacy-win-norwegian-authority-fines-microsoft-s-xandr-8-5-million-cedf6b","Privacy win: Norwegian Authority fines Microsoft’s Xandr € 8.5 Million","2026-10-12T05:15:00+00:00","Norwegian Authority fines Microsoft's Xandr €8.5M for GDPR violations related to Grindr data.",{"slug":78,"title":79,"published_at":80,"brief":81},"azop-croatia-croatian-gambling-operator-ee884a","AZOP (Croatia) - Croatian Gambling Operator","2026-10-11T21:06:33+00:00","Croatian DPA fines gambling operator €2.59M for GDPR violations related to biometric data collection.",[83,87,91,95,99,103],{"slug":84,"title":85,"published_at":86},"xandr-fined-86m-for-processing-grindr-users-sensitive-data-without-consent","Xandr Fined €8.6M for Processing Grindr Users' Sensitive Data Without Consent","2026-10-16T10:20:42.098+00:00",{"slug":88,"title":89,"published_at":90},"iqvia-fined-7m-by-italys-dpa-for-gdpr-violations-exposing-3780-patients-health-data","IQVIA Fined €7M by Italy's DPA for GDPR Violations Exposing 3,780 Patients' Health Data","2026-10-14T10:20:50.218+00:00",{"slug":92,"title":93,"published_at":94},"wind-tre-fined-167m-for-unlawful-telemarketing-and-consent-failures","Wind Tre Fined €16.7M for Unlawful Telemarketing and Consent Failures","2026-10-12T12:20:36.995+00:00",{"slug":96,"title":97,"published_at":98},"google-ordered-to-provide-complete-data-copy-after-incomplete-gdpr-access-request","Google Ordered to Provide Complete Data Copy After Incomplete GDPR Access Request","2026-10-09T12:21:26.776+00:00",{"slug":100,"title":101,"published_at":102},"bbva-fined-55m-for-ignoring-customer-marketing-opt-out-for-seven-months","BBVA Fined €5.5M for Ignoring Customer Marketing Opt-Out for Seven Months","2026-10-09T08:20:27.832+00:00",{"slug":104,"title":105,"published_at":106},"organizations-must-begin-testing-post-quantum-certificate-ecosystems-now","Organizations Must Begin Testing Post-Quantum Certificate Ecosystems Now","2026-10-08T22:21:07.63+00:00",[],{"vanta\u002Fvanta":109,"drata\u002Fdrata":120},{"hq_country":110,"also_provides":111,"reviews":112,"affected":119,"reported":119},"US",[],[113,116],{"label":114,"url":115},"PeerSpot: Vanta user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fvanta-reviews",{"label":117,"url":118},"Gartner Peer Insights: Vanta user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fvanta-859163126",0,{"hq_country":110,"also_provides":121,"reviews":122,"affected":119,"reported":119},[],[123,126],{"label":124,"url":125},"PeerSpot: Drata user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fdrata-reviews",{"label":127,"url":128},"Gartner Peer Insights: Drata user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fdrata-1160371870"]