The Security Ledger

SEPTEMBER 11, 2019

Episode 158: How NotPetya has Insurers grappling with Systemic Cyber Risk Episode 159: Deep Fakes and Election (in)Security with ZeroFOX. Read the whole entry. » » Related Stories Third Party Cyber Risk is growing. Most Companies aren’t prepared. Third party cyber risk is growing. There are lots of reasons for this.

Risk 40

Risk GDPR Data Privacy Personal data 40

Hunton Privacy

DECEMBER 11, 2014

On December 10, 2014, the New York State Department of Financial Services (the “Department”) announced that it issued an industry guidance letter to all Department-regulated banking institutions that formally introduces the Department’s new cybersecurity preparedness assessment process.

Cybersecurity 40

Cybersecurity Financial Services Insurance Information Security 40

Hunton Privacy

MARCH 19, 2014

In a notice published in the Federal Register, OCR stated that the survey will collect information such as “number of patient visits or insured lives, use of electronic information, revenue, and business locations” to assess the organizations’ “size, complexity and fitness” for an audit.

Compliance 40

Compliance Insurance Privacy Risk 40

Hunton Privacy

JANUARY 3, 2014

Under the terms of the settlement with the FTC, which will be in force for 20 years, Accretive must establish a comprehensive information security program that will be evaluated both initially and every two years by a certified, independent third party. The settlement is open for public comment until January 30, 2014.

Insurance 40

Insurance Information Security Risk Access 40

Hunton Privacy

DECEMBER 9, 2015

In response, Wyndham challenged the FTC’s authority to bring charges against private companies’ data security, arguing that by adopting targeted security legislation such as the Gramm-Leach-Bliley Act and the Health Insurance Portability and Accountability Act of 1996, Congress had precluded the FTC’s jurisdiction over data security.

Data breaches 49

Data breaches Information Security Insurance Compliance 49

Data Matters

FEBRUARY 10, 2022

The SEC may also consider updating its guidance on industry best practices, which SCI entities must follow, from the existing guidance that the SEC staff provided in 2014. For more information, please see Sidley’s client alert on the SEC’s market data infrastructure rules available here. 11 See Securities Exchange Act Release No.

Cybersecurity 88

Cybersecurity Marketing Risk Compliance 88

Hunton Privacy

FEBRUARY 6, 2015

On February 3, 2015, the Securities and Exchange Commission (“SEC”) released a Risk Alert , entitled Cybersecurity Examination Sweep Summary, summarizing observations from the recent round of cybersecurity examinations of registered broker-dealers and investment advisers under the Cybersecurity Examination Initiative.

Cybersecurity 40

Cybersecurity Insurance Financial Services Risk 40

Hunton Privacy

SEPTEMBER 23, 2013

Today, September 23, 2013, marks the deadline for compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Omnibus Rule that was issued in January 2013. Change the notice of privacy practices to be distributed to individuals.

Compliance 40

Compliance Privacy Insurance Risk 40

Hunton Privacy

FEBRUARY 12, 2014

On February 12, 2014, the National Institute of Standards and Technology (“NIST”) issued the final Cybersecurity Framework , as required under Section 7 of the Obama Administration’s February 2013 executive order, Improving Critical Infrastructure Cybersecurity (the “Executive Order”).

Cybersecurity 40

Cybersecurity Risk Insurance Privacy 40

Security Affairs

JULY 18, 2019

The European Union is off to a slow start levying fines for abusing data privacy and security, but the now-year-old General Data Protection Regulation gives the government the power to do so. states are left on their own to fine companies which don’t take cybersecurity or client privacy seriously. Until the U.S.

Cybersecurity 63

Cybersecurity Education Government Risk 63

Hunton Privacy

JULY 31, 2014

On July 1, 2014, Delaware Governor Jack Markell signed into law a bill that creates new safe destruction requirements for the disposal of business records containing consumer personal information. confidential health care information.

Financial Services 40

Financial Services Insurance Privacy Paper 40

Hunton Privacy

AUGUST 27, 2014

On August 19, 2014, the German Federal Ministry of the Interior published a revised draft cybersecurity law (the “Draft Law”). Critical Infrastructure” and Security Requirements. The revised Draft Law will amend a number of laws and provisions relating to IT security. Powers of Federal Office for Information Security.

Cybersecurity 40

Cybersecurity Insurance Information Security Security 40

Hunton Privacy

MARCH 5, 2015

In response, Wyndham challenged the FTC’s authority to bring charges against private companies’ data security, arguing that by adopting targeted security legislation such as the Gramm-Leach-Bliley Act and the Health Insurance Portability and Accountability Act of 1996, Congress had precluded the FTC’s jurisdiction over data security.

Insurance 40

Insurance Data breaches Security Access 40

Hunton Privacy

AUGUST 7, 2013

The reports, taken as a whole, suggest eight areas for potential incentives: (1) cybersecurity insurance, (2) federal grants, (3) process preference, (4) liability limitation, (5) streamline regulations, (6) public recognition, (7) rate recovery for price regulated industries and (8) cybersecurity research and development.

Cybersecurity 40

Cybersecurity Insurance Risk Security 40

Hunton Privacy

JUNE 20, 2014

On June 2, 2014, the U.S. Read the FTC’s Consumer Information blog post. Read our previous blog entry about Gameover Zeus and how cyber insurance may help mitigate risks posed by malware. Department of Justice announced a U.S.-led Documents and resources related to the action are available on the DOJ website.

Insurance 40

Insurance Encryption Risk Security 40

IT Governance

DECEMBER 27, 2019

IT Governance is closing out the year by rounding up 2019’s biggest information security stories. Morrisons previously lost two cases related to its March 2014 data breach , in which Andrew Skelton, a senior internal auditor at the supermarket’s Bradford office, leaked the payroll data of 99,998 employees.

Data breaches 69

Data breaches GDPR Passwords Personal data 69

Security Affairs

MAY 27, 2019

The US real-estate insurance biz, First American Financial, accidentally leaked customers’ highly personal files online, hundreds of millions of documents. The US real-estate insurance company First American Financial Corp. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. billion in 2018.

Insurance 56

Insurance Access Security Privacy 56

Data Matters

APRIL 23, 2018

Information security is not yet a science; outside of the handful of issues falling under the field of cryptography, there is no formalized system of classification. The most prepared cybersecurity programs of today will not attempt to implement a static, “out-of-the-box” solution to cyber risk. Principle 5.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60

Hunton Privacy

NOVEMBER 25, 2014

On November 21, 2014, Massachusetts Attorney General Martha Coakley announced that Boston hospital Beth Israel Deaconess Medical Center (“BIDMC”) has agreed to pay a total of $100,000 to settle charges related to a data breach that affected the personal and protected health information of nearly 4,000 patients and employees.

Security 40

Security Insurance Data breaches Education 40

IT Governance

OCTOBER 25, 2018

This week, we discuss the stalemate between Bloomberg Businessweek and Supermicro, Apple and Facebook’s call for a federal data privacy law in the US, and what the Morrisons Appeal Court ruling means for every organisation. We at Apple are in full support of a comprehensive federal privacy law in the United States.”.

Data Privacy 70

Data Privacy Privacy Data breaches GDPR 70