> It also stipulates security control measures such as two-factor authentication (2FA) and access control for any accounts that store sensitive information, end-to-end encryption, training staff in data protection awareness, and a data privacy policy.
Uhhh does it? I'm pretty sure it does not explicitly stipulate this.
Uhhh does it? I'm pretty sure it does not explicitly stipulate this.