Hunton Privacy

NOVEMBER 14, 2022

Health insurance information : an individual’s health insurance policy number or subscriber number in combination with access code or other medical information that permits misuse of an individual’s health insurance benefits.

Insurance 55

Insurance Passwords Access Security 55

Security Affairs

OCTOBER 23, 2024

Building upon the same concept, GigaOm rolled out its first-ever DSPM vendor evaluation report, defining DSPM as a tool that offers “visibility into where sensitive data is, who has access to it, and how it is being used. Who has access to it? Where is it located? How has it been transformed across its lifecycle?

Data Privacy 104

Data Privacy Privacy GDPR Compliance 104

Data Protection Report

DECEMBER 4, 2023

In this post, we will look at several key provisions in DPAs: • Data processor obligations • Applicable laws • Insurance and indemnification • Termination and data return Data Processor Obligations In principle, most obligations created by the DPA should apply to the data processors.

Insurance 64

Insurance Privacy Compliance Personal data 64

IT Governance

APRIL 3, 2019

US food giant Mondelez is suing insurance company Zurich American for denying a $100 million (£76 million) claim filed after the NotPetya attack. In that regard, it was a job well done, with one report estimating that insurers could expect to pay out more than $80 billion (£61 billion) as a result of the attack.

Insurance 42

Insurance Ransomware Government Paper 42

The Last Watchdog

MAY 10, 2021

Back in the mid-1990s, big banks and insurance companies came up with something called “bespoke assessments” as the approach for assessing third party vendor risk. No one, save threat actors, was paying close attention to the ramifications of granting a myriad of small- and mid-sized contractors privileged access inside the company firewall.

Risk 195

Risk Insurance Access Security 195

Security Affairs

MAY 14, 2023

In an update shared on April 3 about the incident, the company announced it has experienced a cyber incident primarily impacting access to internal Microsoft Office 365 applications. Threat actors had access to Capita servers holding details for roughly 470,000 active, deferred, and retired members’ personal information.

Access 92

Access Insurance Security Ransomware 92

The Last Watchdog

APRIL 3, 2019

Its customer base is comprised of eight of the top 15 banks, four of the top six healthcare insurance and managed care providers, nine of the top 15 property and casualty insurance providers, five of the top 13 pharmaceutical companies, and 11 of the largest 15 federal agencies. Users re-defined. Most often, a user is a human being.

Digital transformation 140

Digital transformation Insurance Compliance Healthcare 140

DLA Piper Privacy Matters

APRIL 30, 2021

HIPAA covered entities and business associates should finalize their comments soon, before the comment period for the 2020 Health Insurance Portability and Accountability Act (HIPAA) Notice of Proposed Rulemaking ( NPRM ) closes on May 6. Adding a definition of the term “personal health application.”

Access 137

Access Sales Privacy Insurance 137

Hunton Privacy

MAY 9, 2019

The new requirements include the following: Expanded Definition of Personal Information. HB 1071 expands the definition of “personal information.” As reported by Bloomberg Law , on May 7, 2019, Washington State Governor Jay Inslee signed a bill ( HB 1071 ) amending Washington’s data breach notification law. Method of Notification.

Data breaches 68

Data breaches Passwords Insurance Military 68

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). The Act also excludes from the definition of genetic data, “deidentified data,” as defined in the Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

Hunton Privacy

JUNE 22, 2020

The amendments to Vermont’s Security Breach Notice Act include expanding the definition of Personally Identifiable Information (“PII”), expanding the definition of a breach to include login credentials and narrowing the permissible circumstances under which substitute notice may be used.

Data breaches 107

Data breaches Privacy Education Data Privacy 107

Data Protection Report

OCTOBER 23, 2024

The regulation includes elements of both the Health Insurance Portability and Accountability Act (HIPAA) and the New York Department of Financial Services (NYDFS) cybersecurity regulation. The 72-hour notification requirement is similar to the NYDFS regulation.

Cybersecurity 45

Cybersecurity Risk Access Financial Services 45

Data Matters

DECEMBER 15, 2020

The proposed changes are designed to lead to increased data access, sharing, and portability and to further HHS’s emphasis on patients’ right of information access, which has been highlighted through a series of enforcement actions in 2020. 1] Key provision of the Proposed Rule include: Individual Right of Access.

Privacy 66

Privacy Access Insurance Communications 66

Data Matters

APRIL 15, 2022

Definitions. ” For its definition of personal data, the UCPA excludes deidentified data, aggregated data, and publicly available information. ” For its definition of personal data, the UCPA excludes deidentified data, aggregated data, and publicly available information. To access their personal data; 2.

Privacy 105

Privacy Personal data Sales Insurance 105

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. For example, The Health Insurance Portability and Accountability Act (HIPAA) requires security features such as encryption to protect patients’ health information.

Encryption 113

Encryption IT Passwords IoT 113

Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 86

Cybersecurity Privacy Insurance Risk 86

eSecurity Planet

AUGUST 9, 2022

are subject to laws such as the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (the HITECH Act), as well as regulations such as the Clinical Laboratory Improvements Amendments (CLIA). Healthcare Data Privacy Laws. Health data and patient data in the U.S.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Data Protection Report

FEBRUARY 23, 2023

If a third-party attacker were to gain access to data collected by an AV, the consequences could be quite severe since an attacker could use this information to commit identity theft or obtain unauthorized access to buildings or systems. contact list, messages). Additionally, since AVs can collect data from multiple sources (e.g.,

Privacy 85

Privacy Manufacturing Artificial Intelligence Data collection 85

Hunton Privacy

MARCH 24, 2022

Similar to the CPA and VCDPA, the UCPA contains exemptions for covered entities, business associates and protected health information subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and financial institutions or personal data subject to the Gramm-Leach-Bliley Act (“GLB”).

Privacy 113

Privacy Personal data B2B Sales 113

Data Matters

AUGUST 9, 2021

In addition, the Act expands the definition of personally identifying information, compromise of which would constitute a data breach, to include patient data and medical data—a general category of health-related information that is not limited to protected health information under HIPAA.

Data breaches 86

Data breaches Privacy Personal data Data Privacy 86

eSecurity Planet

OCTOBER 14, 2022

The hackers were able to obtain private keys, which allowed for accessing validator nodes. The definition of Web3 is a bit fuzzy. Besides software issues – which are common for poorly written smart contracts – there are others like private keys not being managed correctly and insider threats from employees or other people with access.

Cybersecurity 120

Cybersecurity Blockchain Security Insurance 120

Thales Cloud Protection & Licensing

JANUARY 16, 2024

Such outsourcing of ICT services also requires a clear definition of responsibilities, risks and mitigation between financial entities and ICT third-party service providers. That includes banks, insurances, payment institutions, stock market, and many financial management firms (trading, crypt-assets, etc). What is the scope of DORA?

Financial Services 83

Financial Services Cloud Cybersecurity Encryption 83

eSecurity Planet

JANUARY 5, 2024

It aims to prevent unauthorized access, manage data movement, and guard against potential security threats. Key firewall policy components include user authentication mechanisms, access rules, logging and monitoring methods, rule base, and numerous rule objects that specify network communication conditions.

Compliance 108

Compliance Access Communications Cybersecurity 108

eSecurity Planet

MARCH 18, 2022

IT practitioners sometimes become confused about the definition of a security policy because security practitioners use the word “policy” as terminology for two very different purposes: Implemented IT policies incorporated into operating system, firewall, or network rules. Written Policies vs. Implemented IT Policies. Start Writing.

IT 123

IT Security Compliance Access 123

Hunton Privacy

MAY 10, 2022

The CTDPA exempts certain entities, including, for example, state and local government entities, nonprofits, higher education institutions, financial institutions subject to the Gramm-Leach-Bliley Act (“GLB”), and qualifying covered entities and business associates subject to the Health Insurance Portability and Accountability Act (“HIPAA”).

Privacy 118

Privacy Personal data Sales B2B 118

HL Chronicle of Data Protection

APRIL 24, 2019

AB 25 would modify the definition of “consumer” to exclude certain employment-related information. It would also refine the definition of “personal information” to remove the term “household” from the definition as well as the expansive formulation “is capable of being associated with.”.

Insurance 40

Insurance Privacy Manufacturing Sales 40

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. systemic risk of insurers with other parts of the financial system, notably the banking.

Insurance 66

Insurance Paper Risk Big data 66

ARMA International

APRIL 18, 2022

Definition and Purpose of a Records Retention Schedule. Certain sectors, such as banking, financial services, health, and insurance have their own data protection and privacy requirements. 8 This is the GDPR definition and other countries have similar broad definitions of personal data. Accessed March 13, 2022.

Personal data 100

Personal data GDPR Privacy Records Management 100

Krebs on Security

AUGUST 27, 2020

Ngo had been making more than $125,000 a month reselling ill-gotten access to some of the biggest data brokers on the planet. based collaborator told Ngo he had personally shut down Ngo’s access to Experian because he had been there first and Ngo was interfering with his business. He was definitely the new coin of the realm.”

Retail 327

Retail Government Access Insurance 327

eSecurity Planet

MAY 4, 2023

Network Asset Management Network asset management processes help manage an organization’s network infrastructure, such as routers, firewalls, wireless access points, and switches. Comprehensive asset view Organizations can access all IT assets across departments and stakeholders thanks to ITAM’s comprehensive repository of IT asset data.

IT 104

IT Compliance Cloud Cybersecurity 104

Hunton Privacy

MAY 24, 2018

The amended law also broadens the definition of personal information and requires regulatory notice and notice to the consumer reporting agencies (“CRAs”) under certain circumstances. Key provisions of the amended law include: Definition of Personal Information. Harm Threshold.

Data breaches 53

Data breaches Passwords Authentication Insurance 53

Hunton Privacy

AUGUST 21, 2017

The amendments include several key provisions: Definition of Personal Information. The prior version of the law did not require regulator notification. Companies will be required to notify affected individuals of a data breach within 60 days. Notice to the Attorney General.

Data breaches 53

Data breaches Passwords Insurance Access 53

Hunton Privacy

JULY 23, 2015

A brief summary of the data security requirements for health insurers and state contractors is set forth below: Health Insurers. Implement security measures to protect personal information stored on Internet-accessible devices. On July 1, 2015, Connecticut’s governor signed into law Public Act No. State Contractors.

Insurance 49

Insurance Data breaches Encryption Authentication 49

Data Matters

MARCH 12, 2019

Of particular note, the Safeguards Rule NPRM proposes to align the FTC’s requirements with those of the New York Department of Financial Services (“NYDFS”), as found in its cybersecurity regulations, and the National Association of Insurance Commissioners (“NAIC”), as found in its insurance data security model law.

Privacy 66

Privacy IT Information Security Insurance 66

Hunton Privacy

JUNE 6, 2019

The Bill extends those obligations to “vendors,” meaning any person with which a previously covered entity contracts to maintain, store, process or otherwise access personal information. Notably, the vendor is not required to give notice to the Attorney General if the covered entity has already done so.

Data breaches 48

Data breaches Insurance Authentication Compliance 48

Hunton Privacy

JUNE 14, 2018

Attorney General Notification: If an entity must notify Colorado residents of a data breach, and reasonably believes that the breach has affected 500 or more residents, it must also provide notice to the Colorado Attorney General.

Data breaches 65

Data breaches Security Passwords Military 65

IT Governance

JANUARY 9, 2024

They accessed 41.5 million customers’ data having gained access via a vulnerability in Hathaway’s Laravel web application framework. million individuals affected HealthEC LLC, a health technology company, has announced that it suffered a data breach in July 2023, in which systems were accessed and files were copied.

Data Privacy 57

Data Privacy Privacy Data breaches Manufacturing 57