AWS Compliance Programs
Global
United States
/automating-security-best-practices-solution-icon%20(1).df6223b44fcba437b74f2170677baf86832ef22d.png "automating-security-best-practices-solution-icon (1)")
Canada
Freedom of Information and Protection of Privacy Act (British Columbia)
Privacy Legislation in British Columbia (BC)
Personal Health Information Privacy and Access Act (New Brunswick)
Privacy Legislation in New Brunswick
Personal Information Protection and Electronic Documents Act (PIPEDA)
Canada’s Federal Private Sector Privacy Legislation
Asia Pacific
Europe
Certifications / Attestations:
Compliance certifications and attestations are assessed by a third-party, independent auditor and result in a certification, audit report, or attestation of compliance.
Laws / Regulations / Privacy:
AWS customers remain responsible for complying with applicable compliance laws and regulations. In some cases, AWS offers functionality (such as security features), enablers, and legal agreements (such as the AWS Data Processing Agreement and Business Associate Addendum) to support customer compliance.
No formal certification is available to (or distributable by) a cloud service provider within these law and regulatory domains.
- Argentina Data Privacy
- BC FOIPPA
- CCPA
- CISPE
- CLOUD Act
- FERPA
- GDPR
- GLBA
- HIA [Alberta, Canada]
- HIPAA
- HITECH
- IRS 1075
- ITAR
- NB PHIPAA [New Brunswick]
- PDPA - 2010 [Malaysia]
- PDPA - 2012 [Singapore]
- PHIA [Nova Scotia, Canada]
- PHIPA [Ontario, Canada]
- PIPEDA [Canada]
- Privacy Act [Australia]
- Privacy Act [New Zealand]
- Spanish DPA Authorization
- U.K. DPA - 1988
- VPAT / Section 508
Alignments / Frameworks:
Compliance alignments and frameworks include published security or compliance requirements for a specific purpose, such as a specific industry or function. AWS provides functionality (such as security features) and enablers (including compliance playbooks, mapping documents, and whitepapers) for these types of programs.
Requirements under specific alignments and frameworks may not be subject to certification or attestation; however, some alignments and frameworks are covered by other compliance programs.
