Hunton Privacy

JULY 12, 2023

On June 22, 2023, the Oregon House of Representatives passed the Oregon Consumer Privacy Act ( S.B. 619 ) (the “OCPA”), which was previously passed by the Oregon Senate on June 20, 2023. Consumer” means a natural person who resides in Oregon and acts in any capacity other than in a commercial or employment context.

Privacy 52

Privacy Personal data Insurance Sales 52

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Security 87

Security Data breaches Ransomware Artificial Intelligence 87

ARMA International

APRIL 18, 2022

Introduction to Data Protection Laws. Data protection laws, regulations, and rules control the collection, use, transfer, and storage of personal and sensitive information. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

Security Affairs

APRIL 28, 2023

In early April, the Italian Data Protection Authority, c, temporarily banned ChatGPT due to the illegal collection of personal data and the absence of systems for verifying the age of minors. The Authority pointed out that OpenAI does not alert users that it is collecting their data.

Personal data 92

Personal data Privacy Access Education 92

Hunton Privacy

APRIL 28, 2023

On April 21, 2023, the Montana and Tennessee legislatures voted to enact comprehensive consumer privacy bills in their respective states. If signed by their governors, Montana’s Consumer Data Privacy Act ( S.B. 384 ) (“MCDPA”) and Tennessee’s Information Protection Act ( H.B. states to enact comprehensive privacy legislation.

Privacy 58

Privacy Personal data Sales Data Privacy 58

Hunton Privacy

SEPTEMBER 21, 2023

On September 14, 2023, the California legislature passed S.B. 362 (“Act”), a bill that would impose new requirements on data brokers and grant residents new rights designed to facilitate control over their personal data. 362 is now awaiting signature by California Governor Gavin Newsom.

Insurance 69

Insurance Personal data Compliance Privacy 69

Hunton Privacy

NOVEMBER 1, 2022

Right to Request to Exercise Personal Data Rights (Rule 4.02 – Rule 4.07; 6.11). The proposed regulation provides the people of Colorado with a mechanism to protect their personal data rights by making requests directly to data controllers, or businesses who control their personal data.

Privacy 78

Privacy Personal data Data collection Compliance 78

Hunton Privacy

MAY 17, 2023

On May 4, 2023, the Florida Senate and House of Representatives voted in favor of sending the Florida Digital Bill of Rights (“FDBR”) and other amendments related to government moderation of social media and protection of children in online spaces ( S.B. 262 ) to Governor Ron DeSantis for signature.

Privacy 83

Privacy Personal data Sales Government 83

Security Affairs

MAY 22, 2023

Department of Commerce and European Commission to provide companies on both sides of the Atlantic with a mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States in support of transatlantic commerce. within six months of DPC’s announcement.

GDPR 86

GDPR Personal data Privacy Data Privacy 86

Hunton Privacy

JULY 20, 2023

On June 30, 2023, the Delaware House of Representatives passed the Delaware Personal Data Privacy Act ( H.B. The DPDPA’s protections would apply to Delaware residents who act for a personal or household purpose, with express exemption for individuals acting in a commercial or employment context.

Privacy 52

Privacy Personal data Sales Risk 52

Data Protection Report

JUNE 26, 2023

The Joint Guide aims to provide practical guidance for businesses operating across these two regions to facilitate compliance with applicable data protection requirements whilst providing for the cross-border transfers of personal data.

Personal data 52

Personal data Compliance IT Privacy 52

Hunton Privacy

FEBRUARY 23, 2023

On February 20, 2023, in the case of Experian Limited v The Information Commissioner , the First-Tier Tribunal in the UK (the “ Tribunal ”) ruled on the ICO’s action to require Experian to make changes to how it processes personal data for direct marketing purposes.

Marketing 64

Marketing Personal data GDPR Privacy 64

DLA Piper Privacy Matters

MARCH 18, 2021

Virginia’s Governor signed the Virginia Consumer Data Protection Act (“VCDPA”) into law on March 2, 2021. The VCDPA takes effect January 1, 2023 and is a broad, multi-rights privacy law that, in some ways, resembles the CCPA, GDPR, and other recently proposed state privacy legislation. Author: Jim Halpert. Key provisions.

Personal data 59

Personal data Sales GDPR Privacy 59

eSecurity Planet

JULY 27, 2023

billion , according to data from Crunchbase. Funding in the first half of 2023 was down 60% from a year earlier. Protect AI Funding Date : July 2023 Amount : $35 million Before founding Protect AI in 2022, Ian Swanson and Daryan Dehghanpisheh worked on massive data science systems at AWS and Oracle.

Cybersecurity 98

Cybersecurity Marketing Cloud Artificial Intelligence 98

Hunton Privacy

MARCH 29, 2023

On Monday, March 27, 2023, the Centre for Information Policy Leadership (CIPL) at Hunton Andrews Kurth submitted a response to the California Privacy Protection Agency (CPPA)’s Invitation for Preliminary Comments on Proposed Rulemaking for cybersecurity audits, risk assessments and automated decisionmaking.

Risk 58

Risk Personal data Cybersecurity Compliance 58

Hunton Privacy

FEBRUARY 2, 2022

In his remarks, Attorney General Weiser highlighted the importance of protecting data security and outlined his office’s plans for implementing the Colorado Privacy Act (“CPA”), which takes effect July 1, 2023. Lastly, it will examine the degree to which the company vets and monitors its vendors’ data security practices.

Privacy 102

Privacy Security Data breaches Ransomware 102

DLA Piper Privacy Matters

APRIL 25, 2023

Authors: Verena Grentzenberg and Katja-Maria Harsdorf On 20 April 2023, the Advocate General (“ AG ”), Nicholas Emiliou, published his Opinion in the case of FT v DW, (C-307/22 ). Data subjects are therefore able to exert considerable pressure on companies by exercising their right of access. 12(5) and Art. 12(5) and Art.

Access 52

Access GDPR Personal data IT 52

Data Protection Report

JULY 11, 2023

It thereby declared that the United States (the US ) ensures an adequate level of protection for personal data transferred from the EU to US companies that have self-certified their adherence to the DP Framework Principles.

Data Privacy 40

Data Privacy Privacy IT Personal data 40

IBM Big Data Hub

FEBRUARY 23, 2024

Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. billion fine in 2023. The GDPR puts forth a litany of rules for how organizations in and outside of Europe handle the personal data of EU residents.

GDPR 74

GDPR Compliance Personal data Privacy 74

Data Protection Report

NOVEMBER 2, 2023

In 2017, Equifax Inc, suffered a cybersecurity breach, with hackers able to access the personal data of around 13.8 The breach included data held by Equifax Inc in connection with two of Equifax’s products.

GDPR 78

GDPR Risk Cybersecurity Compliance 78

Hunton Privacy

MAY 13, 2021

The TDPA also would create a private right of action for tenants whose data is unlawfully sold. Tenants exercising the private right of action could seek compensatory damages or statutory damages ranging from $200 to $1,000 per tenant, as well as attorney’s fees.

Data Privacy 106

Data Privacy Privacy Passwords Authentication 106

DLA Piper Privacy Matters

MARCH 6, 2023

Authors: Heidi Waem and Simon Verschaeve On 21 February 2023, the Litigation Chamber of the Belgian Data Protection Authority ruled on a case relating to the lawfulness of a geolocation tracking system for employee vehicles used by a public authority. GDPR can also be relied on.

GDPR 98

GDPR Personal data Compliance IT 98

Data Matters

NOVEMBER 4, 2020

The law, most of which does not go into effect until January 1, 2023, will substantially overhaul and amend the California Consumer Privacy Act (CCPA) which went into effect just this year, on January 1, 2020, with final regulations issued just a few months ago, on August 14, 2020. Next Steps.

Privacy 120

Privacy B2B Sales Data breaches 120

IT Governance

NOVEMBER 28, 2023

Only a couple of weeks ago, I saw the NCSC Annual Review 2023 , which showed a 64% increase of the number of incident reports on last year. These might be tabletop exercises or red/blue team assessments , which basically test whether the organisation can actually respond to an incident, should one occur.

Risk 52

Risk Compliance Government Security 52

IT Governance

DECEMBER 20, 2022

Although Vladimir Putin and his sympathisers assured the world that they were simply conducting military exercises, the inevitable occurred on 24 February, when troops mobilised and war was declared. Articles 24(1) and 32(1) state that organisations must implement appropriate technical and organisational measures to protect personal data.

Security 130

Security Data breaches Ransomware Military 130

Hunton Privacy

MARCH 8, 2024

In this judgment, the CJEU assessed the role of the Interactive Advertising Bureau Europe (“IAB Europe”) in the processing operations associated with its Transparency and Consent Framework (“TCF”) and further developed CJEU case law on the concept of personal data under the EU General Data Protection Regulation (“GDPR”).

Personal data 69

Personal data GDPR Marketing Compliance 69

Data Matters

MARCH 10, 2021

Unlike the EU General Data Protection Regulation 2016/679 (GDPR), the ePrivacy legal framework applies only to electronic communications data — which may include both personal and non-personal data and is in that respect broader in scope than the GDPR.

GDPR 66

GDPR Metadata Communications Privacy 66

The Last Watchdog

AUGUST 1, 2023

1, 2023 – Guardz , the cybersecurity company securing and insuring SMEs, today disclosed the existence of a Hidden Virtual Network Computing (hVNC) malware targeting macOS devices. SMEs, who once considered macOS as the safer option, should exercise caution and prepare themselves for the impacts of this changing threat landscape.

Insurance 189

Insurance Cybersecurity Risk Education 189

Data Protection Report

JANUARY 30, 2023

1798.135(a).) The other four requirements were already present in New York’s General Business Law § 399-z. 7. a (Yes). In the Matter of Coinbase , Consent Order, ¶ 67 (Jan. Coinbase was required by 23 NYCRR § 500.17 to report this event to the Department within 72 hours of its being discovered.”) 8. b.

Privacy 115

Privacy Cybersecurity Personal data Insurance 115

IT Governance

DECEMBER 6, 2023

As privacy professionals, we see consumers exercising their rights to withdraw consent to their data being processed via ‘opt out’ or ‘unsubscribe’ buttons, for example. The guidance in ISO 29151, which specifies controls that help protect personal data. ‘GDPR’ has become a familiar term. But compliance requires clarity.

Data Privacy 59

Data Privacy Privacy GDPR IT 59

Troy Hunt

NOVEMBER 6, 2023

Verification that supports the alleged source is usually quite straightforward , but disproving a claim can be a rather time consuming exercise, especially when a dataset contains fragments of truth mixed in with data that is anything but. Millions" turned out to be a combination of publicly available LinkedIn profile data and 5.8M

Data breaches 135

Data breaches IT Personal data Passwords 135

Data Protection Report

NOVEMBER 29, 2023

On November 27, 2023, the California Privacy Protection Agency (“CPPA”) released a first draft of rules for automated decision-making technologies under California’s privacy law. The proposed rules revolve around providing notice of the technology’s use, opting out, and consumer access to business information.

Access 64

Access Privacy Personal data Authentication 64

IBM Big Data Hub

MAY 3, 2024

In November 2023, the California Privacy Protection Agency (CPPA) released a set of draft regulations on the use of artificial intelligence (AI) and automated decision-making technology (ADMT). The business buys, sells, or shares the personal data of 100,000+ California residents. How does the CPPA define ADMT?

Artificial Intelligence 65

Artificial Intelligence Privacy Compliance Risk 65

Troy Hunt

DECEMBER 3, 2023

” Anyone can type in an email address into the site to check if their personal data has been compromised in a security breach. Or the UK's NCA to be feeding data in. It's a non-trivial exercise to index that (for all sorts of reasons), but it also seems like an increasingly worthy exercise.

Data breaches 145

Data breaches Passwords Sales IT 145

IBM Big Data Hub

OCTOBER 16, 2023

Many would use data residency and data sovereignty interchangeably, however, there is a difference between the two: data residency deals with the physical location where data resides and involves considerations such as local laws, regulations and infrastructure, while data sovereignty addresses the ownership, control and legal aspects of data.

Cloud 65

Cloud Compliance Data Privacy Privacy 65

Data Matters

MARCH 4, 2021

Ralph Northam signed into law the Virginia Consumer Data Protection Act (VCDPA). The VCDPA, which will not enter into effect until January 1, 2023, borrows heavily from the California Consumer Privacy Act (CCPA) and the European Union (EU) General Data Protection Regulation (GDPR). Exemptions. Employment-related exemptions.

Personal data 72

Personal data GDPR Sales Privacy 72

AIIM

JANUARY 10, 2019

billion in revenue by 2023. One of the most notable blockchain skeptics – David Gerard –argues that if “you were silly enough to put personal data into an append-only ledger which is a proof-of-work blockchain — that’d be flat-out insane.”. The structure of the blockchain does not allow for any such changes.

Blockchain 119

Blockchain GDPR Privacy Personal data 119