What regulations does Cloud Pak for Data comply with?

Cloud Pak for Data complies with the following security and privacy assessments, which may or may not apply to all add-on services on Cloud Pak for Data.

Customers are responsible for ensuring their own readiness for the laws and regulations that apply to them.

Customers are responsible for identifying and interpreting any relevant laws and regulations that may affect their users and any actions their users might need to take to comply with these laws and regulations.

Customers must track whether personal information is present in their data. Cloud Pak for Data is not aware of the presence of personal information in the data that it handles.

FIPS compliance

Federal Information Processing Standards (FIPS) are standards and guidelines issued by the National Institute of Standards and Technology (NIST) for federal government computer systems. The standards are developed when there are compelling federal government requirements for standards, such as for security and interoperability, but acceptable industry standards or solutions do not exist. Government agencies and financial institutions use these standards to ensure that products conform to specified security requirements.

To run Cloud Pak for Data on a Federal Information Processing Standards (FIPS) compliant system, see Enabling FIPS on your Red Hat OpenShift cluster. See also Services that support FIPS.

Cloud Pak for Data uses cryptographic modules that are compliant with Level 1 of the Federal Information Processing Standard FIPS-140-2. Certificates that are used internally are encrypted using FIPS-approved cryptography algorithms. FIPS-approved modules can optionally be used for the transmission of data.

GDPR

Customers are responsible for ensuring their own readiness for the laws and regulations, including the European Union General Data Protection Regulation.

For more information, see IBM Cloud Pak for Data considerations for GDPR readiness.

Accessibility

IBM is committed to accessibility. Accessibility features that follow compliance guidelines are included in the content and documentation to benefit users with disabilities.

For more information, see Accessibility features in product content and documentation.