article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

See the Top Governance, Risk and Compliance (GRC) Tools. are subject to laws such as the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (the HITECH Act), as well as regulations such as the Clinical Laboratory Improvements Amendments (CLIA).

article thumbnail

SEC Announces Settled Charges Against First American for Cybersecurity Disclosure Controls Failures – Lessons Learned

Data Matters

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. This resolution highlights the SEC’s continued focus on cybersecurity. 20, 2017).

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Week in Cyber Security and Data Privacy: 23–29 October 2023

IT Governance

Records breached: 512,000 documents, with details of insurance investigations, vehicle registration certificates, notices of car seizures and payment card details. Records breached: Up to 4,341 files, containing addresses and grades of students from 2003–2022. Includes the driving licences of “thousands of motorists”.

article thumbnail

Best Third-Party Risk Management (TPRM) Tools of 2021

eSecurity Planet

Also known as vendor risk management (VRM), TPRM goes beyond the general risk management and governance, risk, and compliance (GRC) solutions by specializing in the onboarding, risk assessment, and due diligence for organizations working with third parties. OneTrust made our list, see who else did in the Top Cybersecurity Companies for 2021.

Risk 129
article thumbnail

Privacy and Cybersecurity Top 10 for 2018

Data Matters

In Carpenter , the government obtained months’ worth of a suspect’s cell phone location records pursuant to the Stored Communications Act (SCA). Carpenter argues that the government is required to receive a warrant under the Fourth Amendment for his location records. A Pivot Toward Asia for Privacy and Cybersecurity Laws.

article thumbnail

FTC Seeks Comment on Proposed Changes to GLBA Implementing Rules

HL Chronicle of Data Protection

The Safeguards Rule, which originally went into effect in 2003, is process-oriented. It includes general, high level elements of a security program, but lacks detailed security steps. Board reporting. Periodic risk assessments.

Privacy 40
article thumbnail

Nevada and New Hampshire Data Security and Privacy Laws Take Effect

Hunton Privacy

Nevada’s law requires “data collectors,” including government agencies and businesses, that accept payment cards and are “doing business” in Nevada to comply with the Payment Card Industry Data Security Standard (“PCI DSS”).

Privacy 40