Compliance and risk managers have a big job: Their companies may be subject to data privacy regulations like CCPA, patient privacy regulations like HIPAA, financial obligations like GLBA – and a host of other regulations that are specific to industry, geographic location, customer contract, and more.