Hunton Privacy

JULY 1, 2022

In its consent order , the Department noted that the cybersecurity events had caused the exposure of a substantial amount of sensitive personal data belonging to Carnival’s customers, including those residing in New York. NYDFS also found that Carnival had failed to implement basic protocols to prevent data breaches.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Hunton Privacy

FEBRUARY 29, 2024

The resolution agreement requires Green Ridge to pay $40,000 to OCR and enter into a Corrective Action Plan that obligates Green Ridge to, among other items: Implement a security management process, including a thorough risk analysis, which is to be provided to HHS for review within 60 days. Investigate all likely policy violations.

Ransomware 111

Ransomware Personal data Risk Privacy 111

The Last Watchdog

APRIL 30, 2019

I had the chance at RSA 2019 to visit with George Wrenn, founder and CEO of CyberSaint Security , a cybersecurity software firm that plays directly in this space. Then you have the folks whose security programs have run out of steam and they’re looking for a way to prove that they’re doing due care,” Wrenn said.

Cybersecurity 173

Cybersecurity Insurance Security Privacy 173

IT Governance

MAY 30, 2018

The EU General Data Protection Regulation (GDPR) is designed to harmonise data protection laws across the EU, but certain industries will have to respond differently in order to achieve compliance. A report published by research and consultancy company Celent highlights the challenges that the GDPR presents to insurers.

Insurance 50

Insurance GDPR Compliance Data collection 50

AIIM

JULY 24, 2018

Data Privacy and Open Data: Secondary Uses under GDPR. Three Critical Steps for GDPR Compliance. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Hunton Privacy

SEPTEMBER 21, 2023

362 (“Act”), a bill that would impose new requirements on data brokers and grant residents new rights designed to facilitate control over their personal data. The Act would grant California consumers the right to request that data brokers (1) delete and (2) limit the further sale and sharing of consumers’ personal data.

Insurance 69

Insurance Personal data Sales Compliance 69

IBM Big Data Hub

MAY 28, 2024

Its principles are the same as those of data protection—to protect data and support data availability. Data availability —ensuring critical data is available for business operations even during a data breach, malware or ransomware attack.

Data breaches 81

Data breaches GDPR Compliance Encryption 81

DLA Piper Privacy Matters

MAY 17, 2018

DLA Piper and Aon have launched a guide ‘ The price of data security ‘, ahead of the General Data Protection Regulation (GDPR), effective from 25 May 2018. It also looks at insurability of costs associated with GDPR non-compliance (e.g. Criminal penalties are almost never insurable.

Insurance 45

Insurance GDPR Data breaches Personal data 45

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Cross-Border Data Privacy and Security Concerns in the Dawn of Quantum Computing. New EU restrictions could force companies to change data transfer practices and adopt more advanced data encryption methods. In recent years, costly breaches and evolving data security concerns have bubbled up to a board level agenda item.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

IBM Big Data Hub

MAY 9, 2024

The healthcare industry faces arguably the highest stakes when it comes to data governance. For starters, healthcare organizations constantly encounter vast (and ever-increasing) amounts of highly regulated personal data. healthcare, managing the accuracy, quality and integrity of data is the focus of data governance.

Government 66

Government GDPR Compliance Analytics 66

Privacy and Cybersecurity Law

SEPTEMBER 15, 2021

To be considered a high-quality dataset, the personal data included therein must be processed in accordance with the GDPR. The compliance verification immediately brings to mind the impact assessment pursuant to Article 35 of the GDPR. In fact, there are no boundaries for artificial intelligence when it comes to law.

Artificial Intelligence 52

Artificial Intelligence Personal data GDPR Compliance 52

Thales Cloud Protection & Licensing

MARCH 22, 2023

5 Ways CIAM Ensures a Seamless and Secure Customer Experience divya Thu, 03/23/2023 - 05:27 In today's digital-first world, providing customers with trustworthy, hassle-free interactions is critical to business success. At the same time, consumers want to manage their money on demand seamlessly and have secure experiences while doing so.

Customer Experience 71

Customer Experience Security Authentication Privacy 71

Data Protection Report

DECEMBER 4, 2023

Data protection agreements (DPAs) are vital instruments that form part of a service agreement. They allow the business (the data controller) to impose privacy obligations on the third-party service provider (the data processor).

Insurance 64

Insurance Privacy Compliance Personal data 64

IT Governance

JANUARY 9, 2024

million customers’ data having gained access via a vulnerability in Hathaway’s Laravel web application framework. The compromised data allegedly includes names, email addresses and phone numbers. Data breached: 41,500,000 records. Data breached: 4,452,782 records. They accessed 41.5 HealthEC LLC breached, almost 4.5

Data Privacy 76

Data Privacy Privacy Manufacturing Data breaches 76

IT Governance

OCTOBER 11, 2022

One of the most common mistakes that organisations make when addressing cyber security is that they consider it a one-off event. This process should be embedded within your overall cyber security measures in what experts refer to as cyber defence in depth. What is threat management?

Risk 124

Risk GDPR Information Security Personal data 124

Thales Cloud Protection & Licensing

MARCH 6, 2018

Every year, new regulations and compliance orders come into play that impact businesses across the world. This year, the major regulation that will be implemented, is the European Union’s General Data Protection Regulation (GDPR) , which takes effect on May 25, 2018. appeared first on Data Security Blog | Thales e-Security.

Compliance 88

Compliance GDPR Encryption Data Privacy 88

IT Governance

JANUARY 30, 2019

We’re through the eye of the GDPR (General Data Protection Regulation) storm. May 2018 brought a whirlwind of panic as organisations rushed to meet the compliance deadline, but it was followed by months of unnerving silence. Territorial scope refers to where the data is coming from. The basics.

GDPR 86

GDPR Compliance Personal data Data breaches 86

DLA Piper Privacy Matters

APRIL 8, 2019

The new Act codifies the relevant legislation and broadens the possibilities to, under certain conditions, utilize and combine for secondary purposes personal data collected in relation to public or private social and health care operations. The decisions on licenses are subject to an appeal.

Personal data 68

Personal data GDPR Healthcare Compliance 68

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Uniform Personal Data Protection Act.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

DLA Piper Privacy Matters

DECEMBER 3, 2021

45 of 2021 on the Protection of Personal Data Protection (“ PDPL ”), which was issued on 26 September 2021. In this regard we expect it will be welcomed by local, regional and international businesses, in particular those that rely heavily upon personal data and international personal data flows.

Personal data 105

Personal data GDPR Data breaches Compliance 105

DLA Piper Privacy Matters

OCTOBER 25, 2022

The ICO found that Interserve had failed to put appropriate technical and organisational measures in place to secure personal data (in contravention of Articles 5(1)(f) and 32 GDPR) for a period of ~20 months. for violations of the GDPR (the violations were pre-Brexit). The Incident. Digest of points to note in the MPN.

Security 52

Security GDPR Personal data Insurance 52

IBM Big Data Hub

APRIL 24, 2024

These are just some examples of how organizations support data privacy , the principle that people should have control of their personal data, including who can see it, who can collect it, and how it can be used. One cannot overstate the importance of data privacy for businesses today.

Data Privacy 78

Data Privacy Privacy GDPR Personal data 78

Thales Cloud Protection & Licensing

JUNE 15, 2023

A Guide to Key Management as a Service madhav Thu, 06/15/2023 - 11:29 As companies adopt a cloud-first strategy and high-profile breaches hit the headlines, securing sensitive data has become a paramount business concern. The most effective way to ensure data security is through encryption and proper key management.

Encryption 133

Encryption Compliance Cloud Authentication 133

IBM Big Data Hub

JULY 7, 2023

Threats to your data are virtually everywhere these days, and too often, data compromises seem almost inevitable. But with a proactive approach to data security, organizations can fight back against the seemingly endless waves of threats. Data breaches can be disastrous for organizations.

Security 40

Security Data breaches Data Privacy Compliance 40

The Last Watchdog

AUGUST 19, 2021

TMobile has now issued a formal apology and offered free identity theft recovery services to nearly 48 million customers for whom the telecom giant failed to protect their sensitive personal information. At the start of this week, word got out that hackers claimed to have seized personal data for as many as 100 million T-Mobile patrons.

Data breaches 306

Data breaches Authentication Access Personal data 306

Thales Cloud Protection & Licensing

NOVEMBER 15, 2023

These bustling hubs require robust security systems to ensure the safety of passengers, staff, and infrastructure. Traditionally, airport security focused on physical access and the perimeter; however, in the years since 9/11, the digital footprint of the vast interconnected systems contains valuable assets that must be protected.

Cybersecurity 87

Cybersecurity Authentication Access Compliance 87

Data Protection Report

JULY 8, 2019

Following the now famous €50m fine imposed on Google LLC in January 2019, [1] the French Data Protection Authority (the CNIL ) published a decision taken on 28 May 2019 [2] imposing a fine of €400,000 on SERGIC, a company specialised in real estate development, purchase, sale, rental and property management.

GDPR 40

GDPR Personal data Compliance Security 40

IT Governance

FEBRUARY 21, 2024

Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Data Protection Report

JANUARY 19, 2022

As data has become a larger component of transactions and business, regulators have imposed requirements to address privacy concerns and protect the ownership of personal data. Non-compliance with these restrictions can result in significant unexpected costs in a transaction. Indemnities.

Compliance 131

Compliance Access Personal data Risk 131

Security Affairs

NOVEMBER 11, 2018

The best news of the week with Security Affairs. Apple T2 security chip in new MacBooks disconnects Microphone when lid is closed. Flaws in several self-encrypting SSDs allows attackers to decrypt data they contain. Group-IB and CryptoIns introduce the worlds first insurance against cyber threats for cryptocurrency exchanges.

Security 69

Security IoT Insurance Libraries 69

Data Protection Report

OCTOBER 24, 2022

On October 18, 2022, the New York Department of Financial Services announced a settlement with EyeMed, a licensed life, accident, and health insurer, with respect to a security incident that occurred in 2020. Nevertheless, EyeMed certified its compliance with the Cybersecurity Regulation annually, from 2018-2021. Background.

Cybersecurity 52

Cybersecurity Personal data Risk Financial Services 52

Data Protection Report

APRIL 7, 2022

A third regulator has recently entered into a proposed consent that includes a $500,000 fine based in part on a company’s over-retention of personal data for longer than it was needed. The first regulator was the French data protection authority, the CNIL, in 2021, which we wrote about here. Privacy Shield. emphasis supplied).

Privacy 114

Privacy Compliance Insurance Data collection 114

DLA Piper Privacy Matters

OCTOBER 7, 2021

The Middle East’s data protection regulatory landscape is complex, and continues to develop with Saudi Arabia’s ( KSA ) newly published Personal Data Protection Law ( PDPL ). While the PDPL contains the main features of a modern data protection law, it cannot be considered a direct analogue of the GDPR.

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

DLA Piper Privacy Matters

NOVEMBER 6, 2019

Deutsche Wohnen SE is a real estate company which was accused of having used an archiving system for the storage of personal data of tenants which did not allow for the erasure of data that was no longer necessary. The risks of “data cemeteries”. The administrative sanction is not yet final.

GDPR 98

GDPR Personal data Archiving Compliance 98

Collibra

NOVEMBER 20, 2019

Organizations engaging with personal healthcare data need to pay close attention to the rapidly evolving regulatory environment. Over the next few years, the compliance requirements around personal healthcare data are set to evolve at breakneck speed. Exploring CCPA and healthcare data.

Data Privacy 45

Data Privacy Insurance Personal data Privacy 45

Hunton Privacy

OCTOBER 27, 2017

On October 17, 2017, the French Data Protection Authority (“CNIL”), after a consultation with multiple industry participants that was launched on March 23, 2016, published its compliance pack on connected vehicles (the “Pack”) in line with its report of October 3, 2016. 3. “IN -> OUT -> IN” scenario.

Compliance 45

Compliance Data collection GDPR Insurance 45