Unlike many compliance laws, SOC compliance is typically not mandatory to function in a given business like PCI DSS compliance is for processing payment card data. Generally speaking, firms require a SOC audit when their customers ask for 1. Share your views on EU legislation and policies, discussion Europe's upcoming https://www.nathanlabsadvisory.com/blog/tag/data-processing-activities/