Security Affairs

MAY 22, 2021

Air India has disclosed a data breach that impacted 4.5 million of its customers, exposed data includes the personal information of customers registered between August. 26, 2011 and February. ” reads the data breach notification sent to the customers. The post Air India suffered a data breach, 4.5

Data breaches 119

Data breaches Passwords Personal data Cybersecurity 119

Hunton Privacy

OCTOBER 11, 2010

On October 7, 2010, the French Data Protection Authority (the “CNIL”) released its first comprehensive handbook on the security of personal data (the “Guidance”). The Guidance provides general recommendations and best practices aimed at assisting data controllers with the implementation of appropriate security measures.

Personal data 40

Personal data Security Encryption Archiving 40

Hunton Privacy

SEPTEMBER 19, 2011

On June 17, 2011, the National Assembly of the Republic of Angola passed Law 22/11 on Personal Data Protection. The omnibus privacy legislation applies to the automated and non-automated processing of personal data by controllers based or operating in Angola, or subject to, or using equipment governed by, Angola’s laws.

Personal data 40

Personal data Privacy Government Access 40

Hunton Privacy

APRIL 27, 2011

On April 26, 2011, the French Data Protection Authority (the “CNIL”) issued a press release unveiling its inspection goals for the coming year. The CNIL also intends to inspect the cross-border transfers of personal data that are carried out on the basis of EU model clauses and legal derogations. Video Surveillance.

IT 40

IT Personal data Marketing Security 40

Security Affairs

DECEMBER 27, 2022

In the Cambridge Analytica privacy scandal, the company allowed to access to the personal data of around 87 million Facebook users without their explicit consent. The way Facebook managed user data violated a 2011 privacy settlement with the FTC. Follow me on Twitter: @securityaffairs and Facebook and Mastodon.

Privacy 93

Privacy Analytics Data Privacy Personal data 93

Hunton Privacy

MARCH 25, 2020

The Report first notes that the EU General Data Protection Regulation (“GDPR”) contains necessary safeguards and rules with respect to personal data processing in a general health emergency. The Report then turns to legal bases for processing personal data in the COVID-19 context.

Personal data 75

Personal data GDPR Risk Insurance 75

Security Affairs

DECEMBER 27, 2022

In the Cambridge Analytica privacy scandal, the company allowed to access to the personal data of around 87 million Facebook users without their explicit consent. The way Facebook managed user data violated a 2011 privacy settlement with the FTC. Follow me on Twitter: @securityaffairs and Facebook and Mastodon.

Privacy 83

Privacy Analytics Data Privacy Personal data 83

Hunton Privacy

AUGUST 16, 2011

The Department of Commerce released an English translation of Peru’s Law for Personal Data Protection ( Ley de Protección de Datos Personales, Ley No. The law passed Peru’s Congress on June 7, 2011, and was signed by the president July 2, 2011.

Personal data 40

Personal data Privacy Information Security Security 40

Hunton Privacy

JUNE 21, 2011

On June 20, 2011, Malaysia’s Bernama News Agency reported that the Malaysian Ministry of Information, Communication and Culture will establish a government department to facilitate the implementation of Malaysia’s new Personal Data Protection Act.

Personal data 40

Personal data Government Communications Information Security 40

Information Management Resources

MARCH 21, 2018

The agency is reportedly probing whether the firm violated terms of a 2011 consent decree of its handing of user data that was transferred to Cambridge Analytica without their knowledge.

Personal data 29

Personal data IT Data Privacy Privacy 29

Adam Levin

JULY 24, 2020

Recent reports have confirmed that the outage was caused by WastedLocker, a ransomware often used to specifically target and disrupt business operations, and closely associated with Evil Corp, the hacking group behind a $100 million crime spree that began in 2011. The company has yet to provide further details.

Ransomware 61

Ransomware Personal data IT Data breaches 61

Hunton Privacy

MAY 17, 2011

As we previously reported , Korea’s long-awaited Personal Information Protection Act (“PIPA”) was enacted on March 29, 2011. The law generally requires an individual’s informed consent for the collection, use or disclosure of any personal information by any person, company or government agency.

Personal data 40

Personal data Government Information Security Security 40

IT Governance

JULY 5, 2018

of the SRA Code of Conduct 2011. Although these fines are merely the latest items on an ongoing list of bad news for the company, Slater and Gordon is at least fortunate that the GDPR (General Data Protection Regulation) was not in effect at the time. Worse fines if the GDPR had been in effect.

GDPR 53

GDPR Compliance Personal data Data breaches 53

Hunton Privacy

AUGUST 26, 2011

On August 24, 2011, France’s new law concerning electronic communications ( Ordonnance n° 2011-1012 du 24 août 2011 relative aux communications électroniques , or the “Ordinance”) came into force. Non-compliance with these provisions is punishable by up to five years of imprisonment and a €300,000 fine.

Communications 40

Communications Security Personal data Privacy 40

IT Governance

DECEMBER 15, 2020

IT Governance has recorded more than 1,000 publicly disclosed cyber security incidents so far this year and 20 billion breached records. Lawyers are the real winners in the Yahoo data breach compensation case. million (about £91 million at the time) in compensation to users whose personal data was leaked.

Data breaches 110

Data breaches Government Personal data Data Privacy 110

IT Governance

APRIL 9, 2020

Likewise, security researchers have found several major vulnerabilities – one of which can be used to steal Windows passwords, and another two that be used to take over a Zoom user’s Mac and tap into the webcam and microphone. Until last month, its privacy policy contained this statement: Does Zoom sell Personal Data?

Passwords 137

Passwords Privacy Security Government 137

Hunton Privacy

APRIL 12, 2011

On April 12, 2011, U.S. Senators John Kerry (D-MA) and John McCain (R-AZ) introduced the Commercial Privacy Bill of Rights Act of 2011 (the “Act”) to “establish a regulatory framework for the comprehensive protection of personal data for individuals under the aegis of the Federal Trade Commission.” An email address.

Privacy 40

Privacy Marketing Communications Risk 40

Data Matters

JUNE 24, 2021

In the Order, the SEC alleges that First American’s disclosures concerning the vulnerability were deficient because senior executives were not provided all available and relevant information, specifically that First American’s information security personnel had identified and failed to remediate the vulnerability months earlier in January 2019.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Hunton Privacy

JANUARY 24, 2013

On January 24, 2013, the UK Information Commissioner’s Office (“ICO”) served Sony Computer Entertainment Europe Limited (“Sony”) with a monetary penalty of £250,000 resulting from a serious breach of the Data Protection Act 1998. In this case that just didn’t happen…the security measures in place were simply not good enough.”.

Personal data 40

Personal data Passwords Security 40

Hunton Privacy

OCTOBER 21, 2013

On October 19, 2013, the Center for Internet and Society (“CIS”), the Federation of Indian Chambers of Commerce and Industry , and the Data Security Council of India held a Privacy Roundtable in New Delhi , the last in a series of roundtables that began in April 2013. Christopher Graham, UK Information Commissioner.

Privacy 40

Privacy Personal data Communications Government 40

IT Governance

JUNE 20, 2019

The UK’s data protection watchdog has admitted that its website’s cookie policy breaches the requirements of the GDPR (General Data Protection Regulation). The ICO (Information Commissioner’s Office) made the statement following complaints that it was storing visitors’ personal data without their consent.

GDPR 64

GDPR IT Personal data Compliance 64

Data Protection Report

AUGUST 16, 2022

2010-2011 reporting period. Failure to Secure. The unintended recipient of personal information is a known or trusted party. Only 20 RROSH cases were reported in the 2010-2011 reporting year so numbers are unlikely to be statistically significant. [6] By the Numbers [5]. . 2020-2021 reporting period. stolen objects).

Privacy 105

Privacy Risk Cybersecurity Phishing 105

Thales Cloud Protection & Licensing

MARCH 6, 2018

This year, the major regulation that will be implemented, is the European Union’s General Data Protection Regulation (GDPR) , which takes effect on May 25, 2018. GDPR enables consumers to view, limit and control how companies collect and process their personal data. appeared first on Data Security Blog | Thales e-Security.

Compliance 88

Compliance GDPR Encryption Data Privacy 88

Hunton Privacy

OCTOBER 17, 2011

On October 17, 2011, the French Data Protection Authority (the “CNIL”) launched a public consultation on cloud computing (the “Consultation”). The Consultation addresses several specific topics about personal data protection in the cloud computing context, including: The definition of cloud computing.

Cloud 40

Cloud Personal data Risk Security 40

Hunton Privacy

JULY 1, 2013

In 2003, Croatia adopted the Act on Personal Data Protection (the “Act”), which it subsequently amended in 2006, 2008 and 2011. The Act closely tracks the principles of the Data Protection Directive. This generally corresponds to the notification obligation under the Data Protection Directive.

Personal data 40

Personal data IT Compliance Communications 40

Hunton Privacy

MARCH 2, 2011

On March 2, 2011, the German Federal government adopted a draft law revising certain sector-specific data protection provisions in the German Telecommunications Act.

Government 40

Government Data breaches Security Personal data 40

Hunton Privacy

AUGUST 24, 2011

Under the Rules, which were first published on April 11 , an individual’s prior written consent is required to process or disclose sensitive personal data. The Rules will apply only to Indian companies that obtain sensitive personal data directly.

Privacy 40

Privacy Personal data Communications Government 40

Hunton Privacy

JULY 28, 2011

As reported in BNA’s Privacy Law Watch , on July 25, 2011, Russian President Dmitry Medvedev signed a new federal law amending Russia’s personal data privacy law, “On Personal Data.”

Data Privacy 40

Data Privacy Privacy Personal data Data breaches 40

Hunton Privacy

APRIL 25, 2012

The CNIL also indicated that it will continue the work started in 2011 with at least 150 additional inspections related to video surveillance, especially with respect to surveillance in locations that are frequented by large numbers of individuals.

Computer and Electronics 40

Computer and Electronics IT Data breaches Personal data 40

Hunton Privacy

SEPTEMBER 23, 2011

On September 22, 2011, the Senate Judiciary Committee approved three separate bills that would establish a national data breach notification standard. The Data Breach Notification Act of 2011 (the “Feinstein Bill”), is the fifth such bill introduced by Senator Dianne Feinstein (D-CA).

Data breaches 40

Data breaches Computer and Electronics Data Privacy Personal data 40

Hunton Privacy

MARCH 19, 2014

The Marco Civil da Internet (“Marco Civil”), a draft bill introduced in the Brazilian Congress in 2011, proposes Brazil’s first set of Internet regulations, including requirements regarding personal data protection and net neutrality.

Personal data 40

Personal data Communications Security Information Security 40

Hunton Privacy

JUNE 24, 2013

Since 2011, telecom operators and ISPs have been operating under an obligation of the revised e-Privacy Directive to notify national authorities and subscribers in the event of a breach of personal data.

Data breaches 40

Data breaches Personal data Encryption Privacy 40

Hunton Privacy

APRIL 1, 2011

As reported in BNA’s Privacy Law Watch , on March 29, 2011, South Korea’s president approved the Act on the Protection of Personal Data. The implementing rules will be worked out before the law is due to take effect on September 30, 2011.

Privacy 40

Privacy Personal data Data breaches Government 40

Hunton Privacy

MAY 18, 2011

On April 11, 2011, India adopted new privacy regulations, known as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “Rules”). It must be processed only for the purpose for which it was collected.

Privacy 40

Privacy Personal data Data collection Compliance 40

Hunton Privacy

OCTOBER 21, 2011

On October 20, 2011, Mexico’s Ministry of Economy made public an update to its proposed Regulations to the Federal Law for the Protection of Personal Data Held by Private Parties. Revisions to data transfer restrictions. Updated security and breach notification provisions. Clarification of notice requirements.

Personal data 40

Personal data Cloud Government Security 40

Hunton Privacy

JUNE 2, 2011

Costa Rica’s quest for an omnibus privacy law took a major step forward on April 27, 2011, when the Supreme Court of Justice of Costa Rica gave its stamp of approval to a far-ranging piece of privacy legislation, finding that it had no constitutional defects.

Privacy 40

Privacy Personal data IT Information Security 40

Hunton Privacy

NOVEMBER 22, 2011

On November 16, 2011, the French Data Protection Authority (the “CNIL”) published its Annual Activity Report for 2010 (the “Report”) highlighting its main 2010 accomplishments and outlining some of its priorities for the upcoming year. Read the CNIL’s full report (in French). Read our coverage of the CNIL’s 2009 Activity Report.

Privacy 40

Privacy Personal data Government IT 40