Danielle Barbour, Author at Kiteworks

Why EBA Outsourcing Guidelines Demand Encryption Key Control

by Danielle Barbour March 9, 2026March 9, 2026 | Regulatory Compliance

The European Banking Authority’s outsourcing guidelines (EBA/GL/2019/02), which came into full effect in 2022, establish strict requirements for how financial institutions delegate technology services to third-party providers. Among these requirements,...

Data Sovereignty Requirements for Financial Services Under UK GDPR

by Danielle Barbour March 9, 2026March 9, 2026 | GDPR Compliance

Financial services organisations operating under UK GDPR face ongoing obligations to maintain full control over where sensitive customer data resides, how it moves across borders, and who can access it...

5 Critical Operational Resilience Requirements for Belgian Insurance Companies

by Danielle Barbour March 9, 2026March 9, 2026 | Regulatory Compliance

Belgian insurance companies operate in one of Europe’s most demanding regulatory environments. The convergence of DORA, NIS 2 Directive, and sector-specific oversight from the National Bank of Belgium creates a...

EU Data Sovereignty: Beyond GDPR Compliance

EU Data Sovereignty Requirements: What GDPR Demands vs. What Sovereignty Actually Requires

by Danielle Barbour March 4, 2026March 5, 2026 | GDPR Compliance

Ask most compliance teams what EU data sovereignty requires and they’ll point to GDPR. Ask their legal counsel what Schrems II requires and they’ll describe Transfer Impact Assessments and Standard...

Data Sovereignty Obligations for Law Firms Serving International Clients

by Danielle Barbour March 4, 2026March 4, 2026 | Regulatory Compliance

Law firms occupy a unique position in the data sovereignty landscape. They face every obligation that applies to any regulated business — GDPR for EU client personal data, national data...

Data Sovereignty in the Defense Industrial Base: What Contractors Need to Know

by Danielle Barbour March 4, 2026March 4, 2026 | CMMC Compliance

For most industries, data sovereignty compliance comes down to a geographic question: where is data allowed to live, and which government’s laws govern it? For defense contractors, that question is...

Data Sovereignty vs. Data Privacy vs. Data Residency: What’s the Difference?

by Danielle Barbour March 4, 2026March 4, 2026 | Regulatory Compliance

These three terms show up constantly in compliance conversations, often in the same sentence, sometimes as if they mean the same thing. They don’t. Data sovereignty, data privacy, and data...

Data Sovereignty Compliance: What Every Business Needs to Know

by Danielle Barbour March 4, 2026March 4, 2026 | Regulatory Compliance

Data Sovereignty Compliance: What Every Business Needs to Know Data is borderless by nature. It moves across networks, clouds, and continents in milliseconds. Laws, on the other hand, are very...

Your Expert Guide to Selecting the Best Sovereign Cloud Service

by Danielle Barbour March 2, 2026March 2, 2026 | Regulatory Compliance

A sovereign cloud is the right choice when you must keep data, processing, and governance confined to a jurisdiction and governed by local law—minimizing exposure to foreign access or extraterritorial...

How to Stop Cross‑Border Data Transfer Vulnerabilities

by Danielle Barbour February 27, 2026February 27, 2026 | Regulatory Compliance

Moving sensitive information across jurisdictions is now routine—and risky. This guide distills what works for regulated enterprises and governments, and where a centrally governed Private Data Network like Kiteworks helps...

Regulators Are Done Asking Whether You Have an AI Policy. They Want Proof It Works.

by Danielle Barbour February 26, 2026February 26, 2026 | Cybersecurity Risk Management

The International AI Safety Report 2026 is framed as a scientific assessment to support policymaking. It examines what general-purpose AI can do today, what emerging risks it poses, and what...

Your DSPM Told You Where Your CUI Lives. So Why Are You Still Failing CMMC?

by Danielle Barbour February 25, 2026February 25, 2026 | CMMC Compliance

Defense Industrial Base organizations are spending six and seven figures on Data Security Posture Management tools. And those tools are doing exactly what they promised: scanning file shares, cloud storage,...

The State AI Regulation Patchwork Is Coming for Your Technology Investments — and Your Data

by Danielle Barbour February 25, 2026February 25, 2026 | Regulatory Compliance

Your AI system worked fine last quarter. It was compliant, productive, and delivering measurable ROI. Then a state legislature met, and now that same system is either illegal, requires a...

7 Essential Security Features to Block Unauthorized Access to CUI in 2026

by Danielle Barbour February 23, 2026February 23, 2026 | CMMC Compliance

Protecting Controlled Unclassified Information (CUI) in 2026 demands a layered stack that prevents, detects, and proves control across every channel where CUI moves. Executive Order 13556 established CUI as a...

How to Meet Cabinet Office Security Standards for UK Public Sector Organisations

by Danielle Barbour February 23, 2026February 23, 2026 | Regulatory Compliance

UK public sector organisations operate under strict Cabinet Office security standards—principally the Security Policy Framework (SPF) and Government Security Classifications (GSC) policy—designed to protect citizen data, critical infrastructure, and national...

Security and Compliance Blog

Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.

Posts by Danielle Barbour

Why EBA Outsourcing Guidelines Demand Encryption Key Control

5 Critical Operational Resilience Requirements for Belgian Insurance Companies

Data Sovereignty in the Defense Industrial Base: What Contractors Need to Know

Your DSPM Told You Where Your CUI Lives. So Why Are You Still Failing CMMC?

7 Essential Security Features to Block Unauthorized Access to CUI in 2026

How to Meet Cabinet Office Security Standards for UK Public Sector Organisations

Get started.