IT Governance

MAY 30, 2018

A report published by research and consultancy company Celent highlights the challenges that the GDPR presents to insurers. Insurers are data controllers: a person, public authority, agency or body that determines the purpose of processing personal data. Steps insurers should take to become GDPR compliant.

Insurance 43

Insurance GDPR Compliance Data collection 43

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. The bill uses the same definition of “genetic data” as provided for in AB-825.

Privacy 98

Privacy Insurance Security Data breaches 98

Data Protection Report

OCTOBER 3, 2021

biometric information consisting of data generated by electronic measurements of an individual’s unique physical characteristics used to authenticate or ascertain the individual’s identity, such as a fingerprint, voice print, retina or iris image.

Data breaches 142

Data breaches IT Insurance Passwords 142

Hunton Privacy

MAY 4, 2020

Companies that collect, for their own purposes, all the personal data from a given geographic area in online directories and then use the data to send their own direct marketing communications ( e.g. , an insurance company to sell insurance products). In this case, the practice is clearly unlawful.

Marketing 108

Marketing GDPR Communications Personal data 108

Data Matters

MAY 9, 2019

The National Association of Insurance Commissioners (NAIC) held its Spring 2019 National Meeting (Spring Meeting) in Orlando, Florida, from April 6 to 9, 2019. ceding insurer could be eligible for the same reduced collateral requirements that would apply to qualifying EU reinsurers under the revised CFR Model Laws.

Insurance 67

Insurance Blockchain Big data Risk 67

Data Protection Report

FEBRUARY 23, 2023

AVs currently under development can collect location data, biometric data, driver behaviour information, and information acquired through synced mobile devices (e.g., A considerable amount of the data collected by AVs could be considered personal information, and in some cases, “sensitive information.”

Privacy 85

Privacy Manufacturing Artificial Intelligence Data collection 85

Hunton Privacy

NOVEMBER 6, 2019

After conducting onsite inspections in June 2017 and March 2019, the Berlin Commissioner noticed that Deutsche Wohnen SE was retaining personal data of tenants for an unlimited period, without examining whether the retention was legitimate or at all necessary. After the inspection of 2017, Deutsche Wohnen SE improved its archiving system.

GDPR 79

GDPR Archiving Personal data Insurance 79

Thales Cloud Protection & Licensing

JULY 3, 2023

madhav Tue, 07/04/2023 - 05:10 As the data trust gap between customers and businesses continue to grow, and as third-party cookies become redundant, there is an urgency to adopt a modernized approach to customer data collection. Progressive profiling introduces a fresher and far more proactive take on data collection.

Data collection 62

Data collection IT B2C B2B 62

eSecurity Planet

SEPTEMBER 21, 2024

Health Insurance Portability & Accountability Act (HIPAA) The Health Insurance Portability and Accountability Act (HIPAA) sets standards for protecting sensitive health information, particularly electronic health records (EHRs).

Cybersecurity 120

Cybersecurity Computer and Electronics Compliance Privacy 120

Krebs on Security

DECEMBER 29, 2022

Internal Revenue Service website for months: Anyone seeking to create an account to view their tax records online would soon be required to provide biometric data to a private company in Virginia — ID.me. The data is published after Medibank reportedly declines to pay a US$10 million ransom demand.

Passwords 286

Passwords Ransomware Computer and Electronics Access 286

erwin

APRIL 18, 2019

These include: Medical information covered by the Confidentiality of Medical Information Act (CMIA) and the Health Insurance Portability and Accountability Act (HIPAA). Under the GDPR, organizations must make any personal data collected from an EU citizen available upon request. What about access requests? .

GDPR 81

GDPR Compliance Privacy Personal data 81

eSecurity Planet

AUGUST 20, 2024

The company allegedly obtained this information from non-public sources without the consent of the person filing the complaint or the potentially billions of others affected by the data collection. They often include insurance and recovery assistance if your identity is compromised.

Data breaches 130

Data breaches Passwords Encryption Authentication 130

Hunton Privacy

AUGUST 10, 2017

On August 9, 2017, Nationwide Mutual Insurance Co. million settlement with attorneys general from 32 states in connection with a 2012 data breach that exposed the personal information of over 1.2 In October 2012, Nationwide and its affiliate, Allied Property & Casualty Insurance Co. Nationwide”) agreed to a $5.5

Data breaches 45

Data breaches Insurance Data collection Risk 45

Hunton Privacy

JANUARY 16, 2019

As we move closer to implementation of the California Consumer Privacy Act of 2018 (“CCPA”), companies should consider how the new law could affect their operations in multiple ways – including, for example, data collected through their employee benefit plans. Liberty Mutual Insurance Company , the U.S.

Insurance 50

Insurance Data collection Privacy IT 50

The Last Watchdog

SEPTEMBER 20, 2019

Eventually, governments will address the risk by beefing up security and purchasing cyber insurance, which go hand in glove. Ransomware attacks against local government entities at some point will run its course.

Ransomware 153

Ransomware Government Security Retail 153

John Battelle's Searchblog

JANUARY 24, 2012

You may only request user data needed to operate your app (if you create a Facebook app as part of your presence on Facebook). - You may not use data collected in your app in your other advertising efforts (including ad networks). - You may not integrate analytics from third party sources into your efforts inside Facebook.

Insurance 105

Insurance Data collection Analytics IT 105

DLA Piper Privacy Matters

MAY 5, 2020

Main takeaways from the EDBP guidelines are: Connected vehicles raise various privacy and data protection concerns, such as the lack of control and information asymmetry, the risk of excessive data collection; the risk of unlawful further processing of personal data; Most data associated with connected vehicles are considered as personal data (e.g.

Privacy 69

Privacy Personal data GDPR Insurance 69

Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 87

Cybersecurity Privacy Insurance Risk 87

Data Protection Report

APRIL 7, 2022

CafePress included in its email responses to consumers’ commonly asked questions, “CafePress.com also pledges to use the best and most accepted methods and technologies to insure [sic] your personal information is safe and secure.”

Privacy 114

Privacy Compliance Security Insurance 114

Collibra

APRIL 3, 2019

Yet along that path there will be numerous obstacles to overcome – chiefly related to data privacy and governance. The Internet-of-Things has the potential to transform a range of industries – from automotive and agriculture through to healthcare, home appliances and insurance services.

IoT 56

IoT Agriculture Digital transformation Energy and Utilities 56

Data Matters

JUNE 9, 2021

NHS Digital (the national custodian for health and care data in England) in May 2021, announced a new data sharing initiative called the General Practice Data for Planning and Research (GPDPR) service. Once collected, the data will be combined to create a single, national data lake.

Healthcare 78

Healthcare Data collection Personal data GDPR 78

Hunton Privacy

OCTOBER 27, 2017

The data collected in the vehicle remains in that vehicle and is not shared with a service provider ( e.g. , an eco-driving solution that processes data directly in the vehicle to display eco-driving tips in real time on the vehicle’s dashboard). “IN -> IN” scenario. 2. “IN -> OUT” scenario.

Compliance 45

Compliance Data collection GDPR Insurance 45

Reltio

JUNE 12, 2020

1 sentence company description: DataZed is a consultancy that works with organizations to improve their data quality, data governance and data strategy. 1-2 Previous Roles & Companies: Worked as a consultant with general insurers, Lloyd’s market firms, brokers and reinsurers, including Beazley Group and RSA.

Insurance 52

Insurance Customer Experience B2B MDM 52

eSecurity Planet

OCTOBER 11, 2022

To focus on the cybersecurity aspect first, there is the problem of what data your UEBA solution is taking in. If it’s just data collected during the user’s work hours or while they are using company hardware/software, it’s probably fine as long as you make that monitoring clear to the user in advance.

Analytics 125

Analytics Cybersecurity IT Data breaches 125

Hunton Privacy

DECEMBER 1, 2020

The group has diversified its activities into the banking and insurance, travel agency and e-commerce sectors. Between June 8, 2018 and April 6, 2019, the CNIL received 15 complaints from individuals relating to the exercise of their data protection rights with affiliates of the Carrefour Group. Background. and carrefour-banque.fr

GDPR 91

GDPR Personal data Data collection Marketing 91

Hunton Privacy

OCTOBER 5, 2016

It is currently drafted in cooperation with the automobile industry, innovative companies from the insurance and telecommunications sector, and public authorities. The data processing rules should be defined on a case-by-case basis, taking into account the scenario adopted, the type of data collected and users’ legitimate expectations.

Compliance 40

Compliance Personal data Data collection Insurance 40

Information Governance Perspectives

APRIL 5, 2023

Wireless telematics devices and “black box” technologies collect and transmit data on vehicle use, maintenance requirements, and automotive servicing. John Danenberger, CPCU, is Corporate Counsel at State Farm Insurance and specializes in addressing emerging issues around telematics. What’s it like to work in this field?

Insurance 52

Insurance Military Manufacturing Artificial Intelligence 52

HL Chronicle of Data Protection

JANUARY 24, 2020

AB 1202 defines “data broker” to mean a “business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship,” with limited exceptions for entities subject to FCRA, GLBA, or California’s Insurance Information and Privacy Protection Act.

Data collection 59

Data collection Insurance Privacy IT 59

ARMA International

FEBRUARY 21, 2020

There are serious questions of whether tech companies can effectively protect data, the users, and IoB “nodes” from malicious hacking, and whether insurance companies should be able to increase premiums or even deny health coverage based on information generated by IoB data. It has never been able to do so. For More Information.

Computer and Electronics 121

Computer and Electronics Privacy Artificial Intelligence IoT 121

eSecurity Planet

MARCH 17, 2023

Within this framework are requirements to minimize lateral movement and impact in breach scenarios as well as data collection and response requirements. In worst-case scenarios, these firms should cover your business if you’re impacted by a data breach that leaks sensitive information and leads to fines and legal fees.

Security 120

Security Encryption Analytics Cloud 120

Hunton Privacy

NOVEMBER 10, 2011

This week, the Digital Advertising Alliance (the “DAA”) unveiled new “ Self-Regulatory Principles for Multi-Site Data ” (the “Principles”), aimed at expanding the scope of industry self-regulation with respect to online data collection.

Data collection 40

Data collection Insurance Privacy Marketing 40

eSecurity Planet

SEPTEMBER 16, 2022

Banks, financial services, and insurance companies are especially vulnerable to fraud due to their access to large amounts of money and sensitive information for customers and employees alike. As the volume of data collected increases, users may experience slower processing times than they expect.

Analytics 113

Analytics Risk Authentication Financial Services 113

Collibra

JUNE 23, 2023

They are the California Consumer Privacy Act (CPRA), the Health Insurance Portability and Accountability Act (HIPAA), the FBI’s Criminal Justice Information Services (or CJIS), and many more. Focus: Regulatory frameworks Within the United States there are a number of regulatory frameworks that address citizen privacy.

Privacy 109

Privacy Government Data Privacy Data breaches 109

Thales Cloud Protection & Licensing

JULY 12, 2018

As I often highlight in my blogs, data breaches have become all too common, and these continue to have a negative influence on corporate reputation and brand image, resulting in reduced market value and revenues. Protecting the integrity and confidentiality of data collected by all connected devices.

IoT 72

IoT Encryption Data collection Agriculture 72

DLA Piper Privacy Matters

SEPTEMBER 6, 2023

Summary of key requirements under the DPDP Act Scope of the DPDP Act: The DPDP Act is applicable to the processing of “digital personal data”, which includes personal data collected either digitally, or collected in a non-digitised form and subsequently converted into digital form. payments, insurance etc).

Personal data 111

Personal data GDPR Data breaches Compliance 111

DLA Piper Privacy Matters

AUGUST 23, 2021

This aligns with other recent guidance putting clearer parameters around use of biometric data in China). Purposes/Restrictions on Use Collection and processing of data must be directly related to the purpose of processing specified in the privacy notice. Excessive data collection must be avoided.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Info Source

JULY 17, 2018

New Windsor, July 17, 2018 – Web-based forms created with DocuWare Forms simplify and speed up data collection. Recognizing the high utility of web forms and its widespread use in its customer base, DocuWare enhanced the functionality of input fields for optimized, structured data collection.

Data collection 40

Data collection Insurance Data Privacy Paper 40