Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”. O.R.C. §§ 3965.01, 3965.04.

Insurance 68

Insurance Security Cybersecurity Data breaches 68

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

Data Matters

SEPTEMBER 7, 2022

The National Association of Insurance Commissioners (NAIC) held its Summer 2022 National Meeting (Summer Meeting) August 9–13, 2022. The Privacy Working Group has been reviewing state insurance privacy protections regarding the collection, ownership, use, and disclosure of information gathered in connection with insurance transactions.

Insurance 78

Insurance Paper Privacy Risk 78

Hunton Privacy

JUNE 9, 2015

179 (the “Bill”), which expands the definition of “personal information” in the state’s data security law. a medical identification or health insurance identification number; and. a medical identification or health insurance identification number; and. On May 13, 2015, Nevada Governor Brian Sandoval (R-NV) signed into law A.B.

Insurance 49

Insurance Passwords Access Security 49

Data Matters

SEPTEMBER 20, 2021

The National Association of Insurance Commissioners (NAIC) held its Summer 2021 National Meeting (Summer Meeting) August 14-17, 2021. Highlights include, among others, adoption of revised risk-based capital bond factors for life insurers, amendments to SSAP No. NAIC Adopts Revised Risk-Based Capital Bond Factors for Life Insurers.

Insurance 88

Insurance e-Delivery Paper Sales 88

Data Protection Report

OCTOBER 3, 2021

The amendment: Expands the definition of “personal information”; Shortens the notification deadline after discovery of a breach from 90 to 60 days; Removes the requirement to consult with law enforcement as part of a risk assessment; Deems compliant any person subject to and in compliance with HIPAA and HITECH; and.

Data breaches 142

Data breaches IT Insurance Passwords 142

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4 Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Artificial Intelligence 103

Artificial Intelligence Data breaches Security Ransomware 103

IT Governance

APRIL 3, 2019

US food giant Mondelez is suing insurance company Zurich American for denying a $100 million (£76 million) claim filed after the NotPetya attack. In that regard, it was a job well done, with one report estimating that insurers could expect to pay out more than $80 billion (£61 billion) as a result of the attack.

Insurance 53

Insurance Ransomware Government Paper 53

Data Protection Report

DECEMBER 4, 2023

In this post, we will look at several key provisions in DPAs: • Data processor obligations • Applicable laws • Insurance and indemnification • Termination and data return Data Processor Obligations In principle, most obligations created by the DPA should apply to the data processors.

Insurance 62

Insurance Privacy Compliance Personal data 62

Hunton Privacy

NOVEMBER 14, 2022

Health insurance information : an individual’s health insurance policy number or subscriber number in combination with access code or other medical information that permits misuse of an individual’s health insurance benefits.

Insurance 55

Insurance Passwords Access Security 55

Troy Hunt

NOVEMBER 14, 2023

Some more data points before going further: The files is named "ACUITY_MASTER_18062020.csv"

Insurance 122

Insurance Data breaches Mining IT 122

Data Protection Report

JANUARY 5, 2021

Most importantly, note that this definition is NOT limited to personal information. Among those questions are: Should the definition of “computer security incident” include only occurrences that result in actual harm or actual violation of security policies, security procedures or acceptable use policies?

Insurance 141

Insurance Paper Encryption Security 141

Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion. 11, 2001, terrorist attacks.

Insurance 87

Insurance Government Cybersecurity Risk 87

IT Governance

NOVEMBER 3, 2023

Sector overview Most-breached sectors (by number of incidents) # Sector Incidents 1 Other 34 30% 2 Healthcare 31 27% 3 Education 16 14% 4 (tie) Media and telecoms 12 11% 4 (tie) Public and non-profit 12 11% 6 Legal 5 4% 7 Finance and insurance 4 4% Note: The percentages add up to 101% due to rounding.

Data breaches 87

Data breaches Insurance Ransomware Education 87

eSecurity Planet

OCTOBER 5, 2021

Cyber Insurance companies used to simply provide lists of potential vendors approved by the insurer, but with the rising costs of breaches, insurers need to control costs. For this scenario, the definition of team may be quite broad.

Ransomware 119

Ransomware Insurance Cleanup Cybersecurity 119

Hunton Privacy

NOVEMBER 23, 2021

On November 18, 2021, the Federal Reserve, Federal Deposit Insurance Corporation, and Office of the Comptroller of the Currency issued a new rule regarding cyber incident reporting obligations for U.S. banks and service providers.

Insurance 85

Insurance Compliance Security IT 85

Hunton Privacy

AUGUST 2, 2021

In passing the law, Connecticut joins a number of other states in expanding the definition of “personal information” in its data breach notification statute. requiring “preliminary substitute notice” to individuals if a business cannot provide direct notification within the 60-day notification timeframe. Cybersecurity Safe Harbor (HB 6607).

Cybersecurity 87

Cybersecurity Insurance Military Data Privacy 87

Data Protection Report

JULY 28, 2021

The defendant was a life insurance company and the claimant their insured. With regards to the scope of the data subject access right, the FCJ refers to the legal definition of personal data in Article 4(1) GDPR. In particular, the court held the following: No requirement of “essential biographical information”.

Access 127

Access GDPR Personal data Insurance 127

Data Matters

APRIL 15, 2022

Definitions. ” For its definition of personal data, the UCPA excludes deidentified data, aggregated data, and publicly available information. ” For its definition of personal data, the UCPA excludes deidentified data, aggregated data, and publicly available information. The law also does not apply to non-profits.

Privacy 109

Privacy Personal data Sales Insurance 109

Hunton Privacy

JUNE 22, 2020

The amendments to Vermont’s Security Breach Notice Act include expanding the definition of Personally Identifiable Information (“PII”), expanding the definition of a breach to include login credentials and narrowing the permissible circumstances under which substitute notice may be used.

Data breaches 107

Data breaches Privacy Education Data Privacy 107

Hunton Privacy

MAY 9, 2019

The new requirements include the following: Expanded Definition of Personal Information. HB 1071 expands the definition of “personal information.” As reported by Bloomberg Law , on May 7, 2019, Washington State Governor Jay Inslee signed a bill ( HB 1071 ) amending Washington’s data breach notification law.

Data breaches 68

Data breaches Passwords Insurance Military 68

eSecurity Planet

DECEMBER 7, 2023

For example, The Health Insurance Portability and Accountability Act (HIPAA) requires security features such as encryption to protect patients’ health information. Definition, How it Works, & Examples appeared first on eSecurity Planet. You can unsubscribe at any time. Subscribe The post What Is Encryption?

Encryption 95

Encryption IT Passwords IoT 95

Data Matters

AUGUST 24, 2018

The National Association of Insurance Commissioners (NAIC) held its Summer 2018 National Meeting in Boston, Massachusetts, from August 4 to 7, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data . The NAIC is also considering insurers’ use of big data in underwriting life insurance products.

Insurance 60

Insurance Big data e-Delivery Risk 60

Data Matters

SEPTEMBER 4, 2019

The National Association of Insurance Commissioners (NAIC) held its Summer 2019 National Meeting (Summer Meeting) in New York City from August 3 to 6, 2019. NAIC Evaluating Definition of “Best Interest” to Determine Whether to Impose Such a Standard in the Suitability in Annuity Transactions Model Regulation.

Insurance 68

Insurance Paper Risk Analytics 68

Data Matters

AUGUST 9, 2021

In addition, the Act expands the definition of personally identifying information, compromise of which would constitute a data breach, to include patient data and medical data—a general category of health-related information that is not limited to protected health information under HIPAA.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). The Act also excludes from the definition of genetic data, “deidentified data,” as defined in the Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. NAIC Considers Comments to the Group Capital Calculation Template and Instructions and Related Revisions to the Insurance Holding Company Act . GCC Template and Instructions.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

Record Nations

AUGUST 8, 2019

For its formal definition, meaningful use is a term used in healthcare to outline the minimum requirements for using electronic health information and electronic health records (EHRs). The post Meaningful Use of an EHR: What It Is & How It Can Save You Money appeared first on Record Nations.

IT 40

IT Insurance Communications 40

The Last Watchdog

APRIL 3, 2019

Its customer base is comprised of eight of the top 15 banks, four of the top six healthcare insurance and managed care providers, nine of the top 15 property and casualty insurance providers, five of the top 13 pharmaceutical companies, and 11 of the largest 15 federal agencies. Users re-defined. Most often, a user is a human being.

Digital transformation 104

Digital transformation Insurance Compliance Healthcare 104

Schneier on Security

MARCH 26, 2020

Ambiguous definitions of the buyer's obligations and excluded events create uncertainty over what is covered. Moving toward standardized terms and conditions may help consumers, as has been pursued in cyber insurance, but this is in tension with innovation and product diversity. [.].

Marketing 85

Marketing Insurance Risk IT 85

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. systemic risk of insurers with other parts of the financial system, notably the banking.

Insurance 68

Insurance Paper Risk Big data 68

Security Affairs

MAY 14, 2023

Exposed data include names, dates of birth, National Insurance numbers, and USS member numbers. “While Capita cannot currently confirm if this data was definitively “exfiltrated” (i.e., “While Capita cannot currently confirm if this data was definitively “exfiltrated” (i.e., ” We are in the final! .

Access 95

Access Insurance Ransomware Security 95

Hunton Privacy

MARCH 24, 2022

Similar to the CPA and VCDPA, the UCPA contains exemptions for covered entities, business associates and protected health information subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and financial institutions or personal data subject to the Gramm-Leach-Bliley Act (“GLB”).

Privacy 113

Privacy Personal data Sales B2B 113

The Last Watchdog

MAY 10, 2021

Back in the mid-1990s, big banks and insurance companies came up with something called “bespoke assessments” as the approach for assessing third party vendor risk. I came away from my discussion with Kneip encouraged that the answer is definitely, yes. This took the form of programmatic audits.

Risk 147

Risk Insurance Access Security 147

eSecurity Planet

MAY 4, 2023

Asset insurance: Insuring critical assets against loss or damage can give you added protection against financial risks. Definition, Benefits & Types appeared first on eSecurityPlanet.

IT 87

IT Compliance Cloud Cybersecurity 87

erwin

MAY 2, 2022

While talking to the business people about the business requirements, entities tend to be the plural nouns that they mention: insureds, beneficiaries, policies, terms, etc. Look again at Figure 7, what is the difference between an insured and a beneficiary? What is an entity? Just write them down, fill in details later. Got questions?

Cloud 98

Cloud Insurance Metadata IT 98

HL Chronicle of Data Protection

APRIL 24, 2019

AB 25 would modify the definition of “consumer” to exclude certain employment-related information. It would also refine the definition of “personal information” to remove the term “household” from the definition as well as the expansive formulation “is capable of being associated with.”.

Insurance 40

Insurance Privacy Manufacturing Sales 40