Skip to content
Cyber Compliance

GDPR → HIPAA crosswalk

A control-by-control mapping between General Data Protection Regulation (EU 2016/679) and HIPAA Security Rule (45 CFR Part 164, Subpart C). 3 mappings.

GDPRHIPAARelationshipNotes
Art. 32
Security of processing
§164.312(e)(1)
Transmission security
PartialCurated
Cryptography & data protection
Art. 33
Notification of a personal data breach to the supervisory authority
§164.308(a)(6)
Security incident procedures
RelatedCurated
Incident response & breach notification
Art. 33
Notification of a personal data breach to the supervisory authority
§164.404
Notification to individuals
RelatedCurated
Incident response & breach notification

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.