Business Services Communications Exercises 
Hunton Privacy
AUGUST 15, 2022
A covered entity’s cyber program must include phishing training and exercises, as well as monitoring and filtering of emails to block malicious content. The risk assessments required by Section 500.9
Data Protection Report
AUGUST 11, 2022
The draft amendments would also require that relevant employees be trained for their implementation. Covered entities must also periodically test their incident response plans (including “disruptive events such as ransomware,” which NYDFS specifically would require) and their ability to restore systems from backups.
HL Chronicle of Data Protection
SEPTEMBER 14, 2018
The CCPA applies to businesses, service providers, and other third parties. The CCPA does not cover every business. Unless addressed in future legislative activity in 2019, these differences will have significant implications for what covered organizations must do to comply with the CCPA. Who must comply with the CCPA?
Expert insights. Personalized for you.
55 
Let's personalize your content