Which Laws and Certifications Require User Access Reviews (UAR)

Legal requirements for user access reviews

Conducting regular User Access Reviews (UAR) has become a key element of IT and data security in many laws and standards. Below we examine three major frameworks: the EU General Data Protection Regulation (GDPR), ISO 27001, and the Health Insurance Portability and Accountability Act (HIPAA).