Remove Course Remove Financial Services Remove Information Security Remove Privacy
article thumbnail

China’s PIPL has finally arrived, and brings helpful clarification (rather than substantial change) to China’s data privacy framework

DLA Piper Privacy Matters

In good news for organisations handling personal information, China’s Personal Information Protection Law (“ PIPL ”) was finalised on 20 August 2021, and will come into force on 1 November 2021. In this regard, notified consent remains the primary (if not sole) basis for processing of personal information.

article thumbnail

FCA Publishes Wholesale Banks and Asset Management Cyber Multi-Firm Review Findings

Data Matters

Non-technical consequences – firms should ensure that incident response plans take account of the non-technical consequences of cyber-security incidents, such as impact to reputation, clients and markets more broadly (including the market abuse risk noted above) and not simply the implications for the firm’s systems and technologies.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Protection of Privilege in the Aftermath of a Data Breach

Data Matters

United Shore Financial Services, LLC , the plaintiff filed a putative class action against United Shore Financial Services (United Shore) and Xerox Mortgage Services, Inc. XMS) over alleged intrusions into XMS’s systems on which United Shore had stored potential borrowers’ personal information.

article thumbnail

Cybersecurity Standards for the Insurance Sector – A New Patchwork Quilt in the US?

HL Chronicle of Data Protection

For example, the New York Department of Financial Services (‘NYDFS’) in March 2017 issued its Cybersecurity Regulation (23 NYCRR 500) (‘the NYDFS Cybersecurity Regulation’), a groundbreaking and far-reaching regulatory regime focused on financial institutions licensed in New York, including insurance companies.

article thumbnail

Observations on the Cybersecurity Executive Order and Presidential Policy Directive

Hunton Privacy

Of course, it is not clear that the Administration can go far down the road of imposing cybersecurity requirements on industry without legislation. In repeated statements over the past five months, Administration spokespeople and cybersecurity experts have argued that congressional action was necessary.