Compliant With What? A Working Map of GDPR, HIPAA, SOC 2 and ISO 27001

Two of the four are laws you can only be found in violation of; two are attestations you can buy. A practical map of what each framework actually asks, where the control sets genuinely overlap, and why the published overlap figures range from 43% to 85%.