What is regulatory compliance analysis?

Question

Accepted Answer

**Compliance analysis** — ensuring requirements meet regulations.

**Common regulations:**
- **GDPR** — data privacy.
- **HIPAA** — healthcare data.
- **SOX** — financial reporting.
- **PCI DSS** — payment card.

**Analysis steps:**
1. Identify applicable regulations.
2. Map requirements to regulations.
3. Identify gaps.
4. Develop compliance approach.

**Example:**
```
GDPR Requirements:
- Data encryption (Art. 32)
- Right to erasure (Art. 17)
- Consent management (Art. 7)
- Data portability (Art. 20)

System Requirements:
- Encrypt PII at rest and transit
- Delete user data on request
- Track consent changes
- Export user data
```

**BA role:**
- Compliance mapping.
- Gap identification.
- Documentation.

Business Analyst: What is regulatory compliance analysis?