Data Protection Report

OCTOBER 23, 2024

The regulation includes elements of both the Health Insurance Portability and Accountability Act (HIPAA) and the New York Department of Financial Services (NYDFS) cybersecurity regulation. Therefore, covered hospitals may need to revise their risk analysis and management process to comply with the new regulation.

Cybersecurity 45

Cybersecurity Risk Access Financial Services 45

Data Protection Report

APRIL 9, 2024

For example, government contractors or subcontractors with reporting obligations to the DOD or DOE for cyber incidents, or financial services entities that are already required to report cyber incidents to their primary federal regulator would be considered “covered entities” under the CIRCIA.

Ransomware 84

Ransomware Agriculture Cybersecurity Government 84

Data Matters

MARCH 28, 2022

See 45 CFR 164.308(a)(1)(ii)(A)-(B): Implementation Specification: Risk Analysis (required), Implementation Specification: Risk Management (required); see also 45 CFR 164.304 (definition of “Availability”). implement stronger authentication solutions, such as multi-factor authentication. 45 CFR 164.308(a)(5)(i).

Cybersecurity 86

Cybersecurity Privacy Insurance Risk 86

Data Matters

DECEMBER 23, 2020

For banking organizations, notice to regulators would be required within 36 hours of a determination of the event — upending the 72-hour standard shared by several other regulatory regimes for expedited notice and requiring legal and regulatory analysis and determinations to be made during the critical earliest hours of incident response.

Security 66

Security Cybersecurity Insurance Communications 66

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Only 3 definitely haven’t had data breached. Welcome to this week’s round-up of the biggest and most interesting news stories. Organisation name Sector Location Data exfiltrated?

Data Privacy 89

Data Privacy Energy and Utilities Privacy Manufacturing 89

Data Protection Report

FEBRUARY 2, 2024

On January 17, 2024 the New York Department of Financial Services (“NYDFS”) published a Proposed Insurance Circular Letter (“Proposed Circular”) regarding the use of artificial intelligence systems (“AIS”) and external consumer data and information sources (“ECDIS”) in insurance underwriting and pricing.

Insurance 78

Insurance Artificial Intelligence Risk Compliance 78

Collibra

AUGUST 14, 2023

Our framework is informed by our definition of AI governance: AI governance is the application of rules, processes and responsibilities to drive maximum value from your automated data products by ensuring applicable, streamlined and ethical AI practices that mitigate risk, adhere to legal requirements and protect privacy.

Government 52

Government Risk Financial Services Compliance 52

Data Protection Report

OCTOBER 1, 2019

Law § 899-aa) differs from most states’ law in several ways including (1) using separate definitions of “personal information” and “private information;” and (2) providing factors to consider whether personal information had been acquired. Readers may recall that New York’s security breach notification law (N.Y.

Security 40

Security Financial Services Passwords Risk 40

DLA Piper Privacy Matters

APRIL 26, 2021

Definition of AI system. The definition of an AI system is intended to be technology-neutral and future-proof, while providing legal certainty. a) The definition of a high-risk AI system. High-risk AI systems are permitted provided the strict controls set out in the regulation to mitigate risk are in place.

Artificial Intelligence 114

Artificial Intelligence Risk Marketing GDPR 114

Collibra

NOVEMBER 3, 2020

As banks continue to work diligently to prepare for the Federal Reserve’s Capital Analysis and Review matter requiring attention (CCAR MRA) , many of them are finding that a mind shift is required. CCAR MRA reporting: An efficient platform delivers the Fed’s FR Y 14 M/Q/A and FR Y 9C schedule and data points definitions.

Metadata 45

Metadata Government Compliance Financial Services 45

Collibra

SEPTEMBER 5, 2019

The industries with the most respondents specifying that data governance is absolutely “critical” were insurance (60%) and retail/wholesale (55%), closely followed by healthcare and financial services. . Enabling data access without the right context and data quality can unfortunately lead to inaccurate analysis.

Marketing 49

Marketing Analytics Government Financial Services 49

Data Protection Report

DECEMBER 17, 2020

In December 2020 the EC is due to publish two important legislative proposals, the Digital Services Act and the Digital Markets Act ( DMA ). The Data Strategy proposed the establishment of nine common European data spaces for data sharing and pooling, including health, mobility, manufacturing, financial services, energy, and agriculture.

Government 102

Government Personal data Marketing Artificial Intelligence 102

HL Chronicle of Data Protection

SEPTEMBER 12, 2018

Each post will provide analysis of key legal issues implicated by the CCPA along with practical takeaways. We will explore the ramifications for businesses of this seminal legislation in this multi-part series, The Challenge Ahead, authored by members of Hogan Lovells’ CCPA team. provide additional CCPA analyses and reports.

Privacy 40

Privacy Compliance GDPR Data breaches 40

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Only 3 definitely haven’t had data breached. 92 of them are known to have had data exfiltrated, exposed or otherwise breached. Organisation(s) Sector Location Data breached?

Data Privacy 70

Data Privacy Privacy Security Data breaches 70

Reltio

MARCH 19, 2019

Mike Evans is CTO and Founder at Comma Group and has spent more than a decade in the business analysis, MDM and data management space. As an aspiring Project Manager, I was asked to work on an analysis project to understand why some recent initiatives weren’t achieving expected results. I never consciously chose to work in data.

MDM 75

MDM Retail IT Government 75

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Only 1 definitely hasn’t had data breached. Welcome to this week’s round-up of the biggest and most interesting news stories. Organisation(s) Sector Location Data breached?

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

ARMA International

DECEMBER 26, 2019

Just 59% of surveyed RIM professionals are included in their company’s IT strategic planning, including activities such as requirements definition and vendor selection – down from 67% in 2017. Forty percent are challenged by the volume of unmanaged digital documents out of the RIM program’s control.

Content services 76

Content services Cloud Records Management Privacy 76

Data Matters

SEPTEMBER 4, 2019

NAIC Evaluating Definition of “Best Interest” to Determine Whether to Impose Such a Standard in the Suitability in Annuity Transactions Model Regulation. FIO may begin its federal preemption analysis on April 1, 2021, which is the first day of the 42nd month after the date of signature of the Covered Agreement.

Insurance 66

Insurance Paper Risk Analytics 66

Data Matters

AUGUST 24, 2018

In addition to comments on the recommendations outlined in the Trades Letter, the Working Group is requesting additional input on (i) whether a specific materiality threshold should be utilized in the analysis of whether to include a non-financial entity in the scope of the group, (ii) whether to assume that non-U.S.

Insurance 60

Insurance Big data e-Delivery Risk 60

HL Chronicle of Data Protection

NOVEMBER 15, 2018

Analysis of the text has barely started, but some of our initial conclusions are outlined below. The use of “essentially equivalent” instead of simply “equivalent” is significant, as an equivalence regime is currently planned for the financial services sector. Definition of Union law.

GDPR 40

GDPR Personal data Government Financial Services 40

Data Matters

MARCH 21, 2022

The reporting requirements will cover multiple sectors of the economy, including chemical industry entities, commercial facilities, communications sector entities, critical manufacturing, dams, financial services entities, food and agriculture sector entities, healthcare entities, information technology, energy, and transportation.

Ransomware 94

Ransomware Cybersecurity Agriculture Communications 94

ForAllSecure

JANUARY 19, 2022

That's quite a narrow definition. What can they do within the workforce, although this sort of job and sort of landscape we try and work out what they can do, which is the definition of authorization, essentially, this is Simon, what can he do today? Vamosi: And it’s not just in the work environment. I use a password manager.

Passwords 52

Passwords Authentication Access Data breaches 52

Data Matters

DECEMBER 28, 2020

In November 2019, the IAIS agreed to a definition and approach for this assessment, and in November 2020, the IAIS released a draft document setting out the overarching principles and concepts for the assessment of whether the AM provides comparable outcomes to the ICS. evaluate how the model interacts with and improves the rating plan.

Insurance 66

Insurance Paper Risk Analytics 66

IT Governance

APRIL 29, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Only 4 definitely haven’t had data breached. 117 of them are known to have had data exfiltrated, exposed or otherwise breached. Organisation(s) Sector Location Data breached?

Data Privacy 83

Data Privacy Privacy Manufacturing Security 83

IT Governance

JANUARY 16, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Only 4 definitely haven’t had data breached. Welcome to this week’s round-up of the biggest and most interesting news stories. 94 of them are known to have had data breached.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

ForAllSecure

MAY 4, 2021

Duff: Yeah, so I mean pentesting by definition has a little bit of a difference, right, pen tests are more usually centered around where, how to exploit vulnerabilities to get in. Vamosi: all of this starts to sound like pentesting.

Government 52

Government IT Access Analytics 52

ForAllSecure

MAY 4, 2021

Duff: Yeah, so I mean pentesting by definition has a little bit of a difference, right, pen tests are more usually centered around where, how to exploit vulnerabilities to get in. Vamosi: all of this starts to sound like pentesting.

Government 52

Government IT Access Analytics 52

Data Matters

JANUARY 20, 2021

Office of the Comptroller of the Currency (OCC) issued its controversial final rule (Rule) 1 to establish a new requirement for covered banks to provide “fair access” to financial services to both natural persons and legal entities. 3) not deny, in coordination with others, any person a financial service the covered bank offers.

Access 66

Access Financial Services Marketing Risk 66