Hunton Privacy

FEBRUARY 4, 2020

Between 2017 and 2019, the Garante received numerous complaints from individuals (including from individuals who were not existing customers of TIM) claiming that they had received unwanted marketing calls, without having provided their consent or despite having registered on an opt-out list. The fine corresponds to 0.2%

Marketing 62

Marketing Communications Data collection Data breaches 62

Data Protection Report

JULY 26, 2017

On July 11, 2017, the US Coast Guard (USCG) and the Department of Homeland Security (DHS) proposed new cybersecurity draft guidelines for Maritime Transportation Security Act (MTSA) regulated facilities. The guidelines follow the White House’s May 2017 Executive Order to strengthen the cybersecurity of critical infrastructure.

Cybersecurity 40

Cybersecurity Risk Communications Access 40

IT Governance

FEBRUARY 25, 2019

A version of this blog was originally published on 8 December 2017. Account executives and junior penetration testers, for example, tend to have little work experience, and can learn while on the job. In this blog, we provide tips for getting your cyber security career started no matter your background.

Security 75

Security Systems administration Information Security Government 75

Data Matters

OCTOBER 30, 2017

*This post originally appeared in Law 360 on October 24, 2017. Securities and Exchange Commission has issued specific guidance on disclosures related to cybersecurity risk and incidents[2] and the manner in which boards exercise responsibility for overseeing and managing risk.[3] We’ve seen it happen time and again. 1] The U.S.

Compliance 60

Compliance Cybersecurity Risk Government 60

Hunton Privacy

SEPTEMBER 8, 2017

On September 7, 2017, the U.S. The American Red Cross, for example, is not restricted by the HIPAA Privacy Rule from sharing health information. For example, covered entities may use and disclose PHI as necessary for treatment purposes. Other entities’ workforces, by contrast, are not directly liable for complying with HIPAA.

Compliance 49

Compliance Privacy Communications Security 49

Hunton Privacy

AUGUST 9, 2017

On August 4, 2017, the FTC published the third blog post in its “Stick with Security” series. For example, a staff member in charge of payroll should have password protected access to a database of employee information. Additionally, a clean desk policy minimizes the risk that data may be accessed by an unauthorized person after hours.

IT 40

IT Security Systems administration Passwords 40

Data Protection Report

JUNE 9, 2022

The Guidelines supplement the Article 29 Working Party’s Guidelines on the application and setting of administrative fines ( WP253 ) adopted in October 2017 and recommends that the two are read together. On 12 May 2022 EDPB adopted Guidelines on the calculation of administrative fines (the Guidelines ).

GDPR 52

GDPR Compliance Personal data IT 52

Data Matters

OCTOBER 20, 2017

On 4 October 2017 the Article 29 Working Party (“ WP29 ”) published its final Guidelines on Data Protection Impact Assessment (“ DPIA ”) which were initially released in draft form in April 2017. Systematic monitoring: for example an employee monitoring program.

GDPR 60

GDPR Personal data Risk Data collection 60

The Last Watchdog

MAY 11, 2020

A prime example is the National Institute of Standards and Technology’s (NIST) cybersecurity frameworks , a comprehensive cyber hygiene roadmap applicable to businesses of all sizes and in all industries The trouble is the NIST guidelines are voluntary. The implementation of CMMC represents a sea change from past U.S.

Computer and Electronics 113

Computer and Electronics Encryption Cybersecurity Privacy 113

Data Matters

FEBRUARY 11, 2021

On April 27, 2017, the SFO commenced an investigation into KBR Inc.’s On April 4, 2017, the SFO issued a notice to KBR UK pursuant to Section 2(3) CJA 1987 (“Section 2 notice”) requiring it to produce certain information and documents “held by KBR UK.” Background. Department of Justice and the Securities and Exchange Commission.

IT 68

IT Compliance Privacy Security 68

DLA Piper Privacy Matters

OCTOBER 31, 2019

This generally aligns with the draft assessment guide on the conduct of PIIAs, published back in September 2017. Promotion of online mechanisms for users to exercise data subject rights (deletion, de-registration, access, correction, revoke consent etc.). staff, data subjects, business partners etc.).

Privacy 49

Privacy Data Privacy Data collection Data breaches 49

Adam Shostack

AUGUST 28, 2020

Mark spends a lot of energy explaining the law of the case and some of the subtleties, for example: “It’s also clear that Uber and Sullivan did not want the FTC to know about the 2017 breach. If you’re not familiar with that, searches such as “why do innocent people plead guilty” may be eye opening.

Data breaches 49

Data breaches IT 49

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. The six steps are summarized below. Step 1: Appointing a Data Protection Officer (“DPO”) or “Pilot”.

GDPR 75

GDPR Personal data Compliance Privacy 75

DLA Piper Privacy Matters

NOVEMBER 5, 2019

This generally aligns with the draft assessment guide on the conduct of PIIAs, published back in September 2017. Promotion of online mechanisms for users to exercise data subject rights (deletion, de-registration, access, correction, revoke consent etc.). staff, data subjects, business partners etc.). avoid excessive data collection).

Data collection 45

Data collection Data breaches Privacy Information Security 45

Hunton Privacy

OCTOBER 3, 2017

On September 29, 2017, the Federal Trade Commission published the eleventh blog post in its “Stick with Security” series. For example, sensitive files should be kept in a secure location on company premises where only the appropriate employees can access them.

IT 40

IT Security Paper Encryption 40

Elie

DECEMBER 12, 2019

By December 2017, with three full years of carefully categorised data, we had the means to deliver an improved transparency dashboard — which we. For example, as can be seen in the chart, French Internet users requested on average 12 URL delistings per 1,000 users, whereas in Italy there were 7 such requests, and in Greece only 3.

Privacy 118

Privacy Paper Government GDPR 118

Elie

FEBRUARY 26, 2018

By December 2017, with two full years of carefully categorised additional data, it was clear that we now had the means to deliver an improved transparency dashboard -- which we made publicly available earlier this week. The way the RTBF is exercised through Europe varies by country. For example peoplecheck.de

Privacy 107

Privacy Government Paper Access 107

Hunton Privacy

FEBRUARY 2, 2018

The Guidelines were adopted by the Working Party on November 28, 2017, for public consultation. The Working Party should clarify that in providing information beyond what is required under the GDPR, controllers must be able to exercise their judgement on whether and how to provide such information.

GDPR 54

GDPR Privacy Archiving Paper 54

Hunton Privacy

JANUARY 5, 2017

On January 3, 2017, the Office of Management and Budget (“OMB”) issued a memorandum (the “Breach Memorandum”) advising federal agencies on how to prepare for and respond to a breach of personally identifiable information (“PII”).

Data breaches 53

Data breaches Privacy Encryption Risk 53

Cyber Info Veritas

JULY 18, 2018

On July 2017, one of the most devastating incidents in the history of cyber attacks took place when a group of elite hackers hacked into Equifax, one of the largest credit bureaus in the globe and stole private data including social security numbers, credit card numbers etc of around 145 million clients.

Cybersecurity 40

Cybersecurity Ransomware Information Security Risk 40

Data Matters

JUNE 11, 2020

For example, the Investment Group may have an employee serving on the board of directors of the company or a shareholder committee. For example, Investment Groups may be approached about investing in an offering that has not yet been publicly disclosed (e.g., 15, 2017), [link]. Division of Enforcement Annual Report (Nov.

Risk 76

Risk Compliance IT Access 76

Data Protection Report

MAY 23, 2018

These data subject rights are not new as similar rights were already in place before the GDPR in Europe (and most frequently exercised in the UK), but for organizations that are based outside the EU, this procedure may have been put in place for the first time and never put to test before. In principle, this is nothing new.

GDPR 40

GDPR Personal data Compliance Data breaches 40

DLA Piper Privacy Matters

OCTOBER 6, 2017

Many other EU Member States have implemented more specific notification requirements which relate to particular data processing activities (for example, whistleblowing or international transfers), and which in some cases require a review by the local Data Protection Authority of the relevant documentation implementing that activity.

GDPR 40

GDPR Risk Personal data Compliance 40

Data Protection Report

DECEMBER 6, 2017

On October 28, 2017, the Turkish Data Protection Authority (the “ Authority ”) published an important regulation supplementing the Law on Protection of Personal Data (the “ Data Protection Law ”), namely the Regulation on the Deletion, Destruction and Anonymization of Personal Data (the “ Regulation ”). Overview of the Regulation.

Personal data 40

Personal data Paper Encryption Cloud 40

Data Protection Report

DECEMBER 5, 2018

The MPS has long been involved in data security through its multi-level protection system under the Multi-Level Protection Measures, but it has not to date exercised a great deal of power over matters of personal information protection. The draft Guideline therefore represents the MPS’s most recent major foray into this area.

Information Security 40

Information Security Security Passwords Authentication 40

Data Matters

OCTOBER 1, 2020

Since 2017, SEC guidance and enforcement actions have made clear that many, but not all, digital assets are “securities” under both the U.S. Background. Securities Act of 1933 (Securities Act) and the Exchange Act.

Security 68

Security Blockchain Marketing Risk 68

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. The ballot initiative largely mirrored what is now the language in the CCPA.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

HL Chronicle of Data Protection

MAY 13, 2019

For example, the New York Department of Financial Services (‘NYDFS’) in March 2017 issued its Cybersecurity Regulation (23 NYCRR 500) (‘the NYDFS Cybersecurity Regulation’), a groundbreaking and far-reaching regulatory regime focused on financial institutions licensed in New York, including insurance companies.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

In the aftermath of the Cambridge Analytica scandal, and in the footsteps of Europe’s General Data Protection Regulation (“GDPR”), California privacy advocates introduced a ballot initiative on October 12, 2017 called “The Consumer Right to Privacy Act of 2018” (No. The ballot initiative largely mirrored what is now the language in the CCPA.

Privacy 58

Privacy Sales Education Government 58

Data Protection Report

JUNE 4, 2018

billion – roughly 4 percent of each company’s revenue for 2017, the maximum penalty allowed under the GDPR. In addition to these high-profile examples, we are aware that a number of data controllers saw a marked increase in requests from employees and customers seeking to exercise their new rights last week.

GDPR 40

GDPR Compliance Personal data Privacy 40

Data Protection Report

SEPTEMBER 25, 2017

The draft Cyber Bill was unveiled on 10 July 2017. Originally scheduled to end on 3 August 2017, the public consultation period was extended due to widespread interest in the legislation. participate in exercises. CII owners are subject to the following statutory duties to: provide information. comply with codes and directions.

Cybersecurity 40

Cybersecurity Data breaches Personal data Compliance 40

HL Chronicle of Data Protection

JUNE 17, 2019

Hong Kong’s past reforms to the PDPO have been “event driven”, the best example being the Octopus Rewards case in 2010, which led to extensive reforms to Hong Kong’s direct marketing controls. Cathay Pacific did not encrypt database backup files used to support database migrations carried out between 2016 and 2018.

Personal data 40

Personal data Data breaches Security Compliance 40

ForAllSecure

APRIL 7, 2021

So, the second barrier is time so like if we can, you know, for example, give them a boot camp or not a boot camp the cost 10s of 1000s of dollars, all of our programming for Black House hack is free. Vamosi: So she founded Black Girls Hack to help others. So, you know what we're doing is we're providing a discount for them.

Cybersecurity 40

Cybersecurity Information Security Security IT 40

ForAllSecure

APRIL 7, 2021

So, the second barrier is time so like if we can, you know, for example, give them a boot camp or not a boot camp the cost 10s of 1000s of dollars, all of our programming for Black House hack is free. Vamosi: So she founded Black Girls Hack to help others. So, you know what we're doing is we're providing a discount for them.

Cybersecurity 40

Cybersecurity Information Security IT Security 40

Data Matters

DECEMBER 11, 2018

For example, the Template allows for: (a) multiple grouping options (e.g., and the EU in September 2017. To that end, the Template was designed to provide maximum flexibility and multiple testing criteria and options in order to analyze the impact of tentative possibilities for a GCC. The Covered Agreement prohibits a U.S.

Insurance 68

Insurance Paper Risk Big data 68

Schneier on Security

JUNE 8, 2021

Transportation Command in 2017, after learning that their computerized logistical systems were mostly unclassified and on the internet. For example, there has been serious concern over Chinese-made 5G networking equipment that might be used by China to install “back doors” that would allow the equipment to be controlled.

Military 143

Military Cybersecurity Communications Manufacturing 143

CILIP

NOVEMBER 7, 2020

This is a good example of how the British Council exercises ?soft In a shopping mall, for example, curious shoppers and young families experienced ?library The Harare librarian, Maynard Chipangura, visited the UK, following a tour itinerary we prepared which included attendance at the CILIP Conference in 2017. soft power?

Libraries 52

Libraries e-Delivery Government Communications 52