All data protection regulations require customers to perform initial due diligence and ongoing monitoring of records management service providers. Because it is designed specifically to verify and monitor regulatory compliance as well as security best practices, requiring Privacy+ Certification of records management service providers fulfills the customer’s regulatory obligation.