Data Protection Report

JANUARY 4, 2024

December tends to be a busy time for everyone, so you may have missed a privacy update or two. We have set out some updates in the form of questions, with links in the answers where you can find more information. (For For those making this quiz a competitive event, we have included a tie-breaker/bonus question.) Answers are below.

Privacy 111

Privacy Cybersecurity Artificial Intelligence e-Discovery 111

IT Governance

FEBRUARY 6, 2024

Source 1 ; source 2 (New) Professional services USA Yes 11,556 Poder Judicial de Santa Cruz Source (New) Legal Argentina Yes 8,732 J.D.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

IT Governance

MARCH 11, 2024

Source (New) Finance USA Yes 3,494 Woodruff Sawyer Source (New) Insurance USA Yes 3,087 Blackburn College Source (New) Education USA Yes 3,039 CAIRE Inc. Source (New) Professional services Netherlands Yes 28.3 Source (New) Professional services Netherlands Yes 28.3

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

The Last Watchdog

DECEMBER 27, 2021

In 2021, we endured the fallout of a seemingly endless parade of privacy controversies and milestone cyber attacks. On the privacy front, California beefed up its consumer data privacy regulations even as Facebook and Apple publicly feuded over how each of these tech giants abuse of consumer privacy and loosey handle sensitive data.

Privacy 235

Privacy Cybersecurity Ransomware Insurance 235

Hunton Privacy

MAY 10, 2022

On May 10, 2022, Connecticut Governor Ned Lamont signed An Act Concerning Personal Data Privacy and Online Monitoring , after the law was previously passed by the Connecticut General Assembly in April. Connecticut is now the fifth state to enact a consumer privacy law. As with most of the existing U.S.

Privacy 118

Privacy Personal data Sales B2B 118

Data Protection Report

JANUARY 30, 2023

Late December and early January tend to be a busy time for everyone, so you may have missed a privacy update or two during that time. 3. Does an insurance policy that covers direct physical loss or damage to media cover the situation where ransomware renders downloaded software useless because it could not be decrypted?

Privacy 115

Privacy Cybersecurity Personal data Insurance 115

IT Governance

MARCH 5, 2024

TB Turtlemint Source (New) Insurance India Yes 1,800,000 Chunghwa Telecom Source (New) Telecoms Taiwan Yes 1.7 Source (New) Engineering Japan Yes >5 TB Array Networks Source (New) Cyber security USA Yes 2.5

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

APRIL 9, 2024

Other databases contained health insurance data, such as patents’ names, dates of birth, addresses and medical data. EyeCare Services Partners exposes more 3.5 The biggest database in the blob contained 3.1 million patients and 1.6 million unique Social Security numbers. Source (New) Manufacturing USA Yes 1.1

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

Hunton Privacy

APRIL 18, 2023

state to enact comprehensive privacy legislation. SB 5 now will head to Governor Eric Holcomb for a final signature, where he will have seven days upon transmission to sign SB 5 into law or veto it. This could make Indiana the seventh U.S.

Privacy 132

Privacy Personal data Sales Insurance 132

IT Governance

JANUARY 23, 2024

Source (New) Real estate USA Yes 46,906 Hampton-Newport News Community Services Board Source 1 ; source 2 ; source 3 (New) Healthcare USA Yes 44,312 Air Methods Source 1 ; source 2 (New) Healthcare USA Yes 34,016 GREYHOURS Source (New) Retail France Yes 18,700 Groveport Madison Schools Source 1 ; source 2 ; source 3 (Update) Education USA Yes 15.5

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

APRIL 22, 2024

Mobile Guardian, which is used to help parents manage their children’s device usage, was hacked on 19 April, according to the Singaporean Ministry of Education. Mobile Guardian, which is based in the UK, said that its investigations detected unauthorised access to its systems via an administrative account on its management portal.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

Hunton Privacy

MARCH 17, 2023

state to enact comprehensive privacy legislation. The bill is most similar to Utah’s comprehensive privacy law. Unlike some of the other comprehensive state privacy laws, Senate File 262 would not require controllers to undertake data protection assessments.

Privacy 72

Privacy Personal data Sales Insurance 72

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. The bill also makes a number of non-substantive changes to the California Consumer Privacy Act (“CCPA”)/CPRA.

Privacy 98

Privacy Insurance Security Data breaches 98

IT Governance

JANUARY 9, 2024

million people was compromised, including names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, medical information, health insurance information, and billing and claims information. Information relating to nearly 4.5 Data breached: 4,452,782 records. TB Gräbener Maschinentechnik GmbH & Co.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

IT Governance

JANUARY 16, 2024

GB Rebekah Children’s Services Source (New) Non-profit USA Yes 2,805 Butte School District Source 1 ; source 2 (Update) Education USA Yes 2,658 Dignity Health Nevada St. GB Rebekah Children’s Services Source (New) Non-profit USA Yes 2,805 Butte School District Source 1 ; source 2 (Update) Education USA Yes 2,658 Dignity Health Nevada St.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

DECEMBER 19, 2023

According to Delta Dental’s breach notification, affected personal data included addresses, Social Security numbers, driver’s license numbers or other state identification numbers, passport numbers, financial account information, tax identification numbers, individual health insurance policy numbers and health information. Wolasky P.A.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Hunton Privacy

JUNE 22, 2020

On July 1, 2020, amendments to Vermont’s data breach notification law, signed into law earlier this year, will take effect along with Vermont’s new student privacy law. Student Data Privacy. Security Breach Notice Act. The number of affected consumers exceeding 5,000 is no longer a basis for providing substitute notice.

Data breaches 107

Data breaches Privacy Education Data Privacy 107

Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

The Last Watchdog

MARCH 20, 2023

Exploitation drivers From the case of Hegestratos committing insurance fraud by sinking a ship in 300 B.C., Cybersecurity has similarly developed as a necessary countermeasure to prevent scammers from rampaging the privacies of citizens. The advancement of fraud has materialized parallel to that of currency.

Cybersecurity 214

Cybersecurity Education Insurance Data breaches 214

Hunton Privacy

DECEMBER 23, 2019

Department of Education and the U.S. Department of Health and Human Services released joint guidance on the application of the Family Educational Rights and Privacy Act (“FERPA”) and the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule to student records.

Education 53

Education Insurance Privacy IT 53

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). Violations of the Act are subject to civil penalties. Department of Health and Human Services pursuant to HIPAA and the HITECH Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

IT Governance

OCTOBER 24, 2023

Breached organisation: ClassPad.net, an educational web application operated by Casio Computer Co., American Family Insurance confirms cyberattack is behind IT outages Date of breach: 14 or 15 October 2023. Breached organisation: American Family Insurance, headquartered in Wisconsin, US. Records breached: Unknown.

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

IT Governance

FEBRUARY 21, 2024

Welfare Benefits Plan Source 1 ; source 2 New Healthcare USA Yes 13,079 Insurance ACE/Humana Inc. Source New Manufacturing USA Yes 20,415 TECA Srl Source New Transport Italy Yes 16.7 GB AGC Flat Glass North America, Inc.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Data Matters

JUNE 22, 2022

Connecticut has passed a new state data privacy law slated to go into effect on July 1, 2023. Consistent with all of the state data privacy laws we have seen to date, the Connecticut law does not provide for a private right of action to broadly enforce the privacy rights provisions of the law.

Data Privacy 88

Data Privacy Privacy Personal data Sales 88

IT Governance

JANUARY 30, 2024

Source (New) Retail USA Yes 2,588,849 Keenan & Associates Source 1 ; source 2 (Update) Insurance USA Yes 1,509,616 AGC Group Source (New) Manufacturing Japan Yes 1.5 TB Four Hands Source (New) Manufacturing USA Yes 1.5 TB UK forex customers Source (New) Finance UK Yes 1,001,214 A.N.S. Source (New) Non-profit USA Yes 25,908.62

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

The Last Watchdog

OCTOBER 5, 2023

Editor’s note: I recently had the chance to participate in a discussion about the overall state of privacy and cybersecurity with Erin Kapczynski, OneRep’s senior vice president of B2B marketing. OneRep provides a consumer service that scrubs your personal information from Google and dozens of privacy-breaching websites.

Cybersecurity 203

Cybersecurity Privacy Cloud IoT 203

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. Source New Defence USA Yes 1,051 Connecticut College Source New Education USA Yes 954 American Alarm & Communications Inc.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Connecticut: An Act Concerning Data Privacy Breaches.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

IT Governance

FEBRUARY 27, 2024

The breached data may include names, Social Security numbers and health insurance information. For some victims, the stolen data also included Social Security numbers and health insurance information. TB The Peddie School Source (New) Education USA Yes 1.2 Data breached: 4,662,668 individuals’ data.

Data Privacy 52

Data Privacy Manufacturing Privacy Data breaches 52

Information Governance Perspectives

MAY 8, 2020

Hunter, Dr. Tao Jin, Dr. Patricia Franks, Rae Lynn Haliday, Cheryl Pederson, and Wendy McLain on the topic of Meeting Evolving Business Needs – A Conversation Between RIM Educators and Thought Leaders. And recruiters are looking for that education and experience. They have to move from defense to offense.

Education 52

Education Digital transformation Search queries Information governance 52

Information Governance Perspectives

MAY 10, 2020

In May of 2020 I was honored to speak at the MERv conference with John Frost of Box on the topic of Using Information Governance with a Privacy Compliance Plan as the Fulcrum for Data Privacy and Continuous Compliance. Privacy makes data governance ethical and tangible, and compliance leaders understand that.

Compliance 52

Compliance Information governance Privacy Data Privacy 52

IT Governance

NOVEMBER 28, 2023

The post The Week in Cyber Security and Data Privacy: 20 – 26 November 2023 appeared first on IT Governance UK Blog. In the meantime, if you missed it, check out last week’s round-up. Please do also let us know what you think about our new table format.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Data Matters

JULY 28, 2021

Congress continuing to stymie federal omnibus privacy legislation, states have decidedly taken up the call. Jared Polis signed into law Senate Bill 21-190, the Colorado Privacy Act (CPA). Most recently, on July 8, 2021, Colorado Gov. After signing the CPA into law, Gov. ” Additionally, Gov. Applicability and Definitions.

Privacy 88

Privacy Sales Personal data Compliance 88

Hunton Privacy

MAY 27, 2015

In a webinar, entitled Cyber Insurance: Addressing Your Risks and Liabilities , hosted by Hunton & Williams LLP and CT , Hunton & Williams partners Lon A. Berk and Lisa J. Download a copy of the webinar.

Insurance 45

Insurance Risk Data breaches Education 45

IT Governance

SEPTEMBER 6, 2023

– JDSupra (unknown) VNS Health Confirms Data Breach at TMG Health Resulted in Data of 103,775 Consumers Being Leaked | Console and Associates, P.C. – JDSupra (unknown) Hillsborough County Confirms MOVEit Data Breach Leaks Information of 70k+ | Console and Associates, P.C.

Data breaches 104

Data breaches Ransomware Insurance Privacy 104