Hunton Privacy

AUGUST 9, 2017

On August 4, 2017, the FTC published the third blog post in its “Stick with Security” series. As we previously reported , the FTC will publish an entry every Friday for the next few months focusing on each of the 10 principles outlined in its Start with Security Guide for Businesses.

IT 40

IT Security Systems administration Passwords 40

Hunton Privacy

OCTOBER 3, 2017

On September 29, 2017, the Federal Trade Commission published the eleventh blog post in its “Stick with Security” series. As previously reported , the FTC will publish an entry every Friday for the next few months focusing on each of the 10 principles outlined in its Start with Security Guide for Businesses.

IT 40

IT Security Paper Encryption 40

Data Matters

OCTOBER 1, 2020

Securities and Exchange Commission (SEC)’s Division of Trading and Markets issued its first no-action letter (Letter) to the Financial Industry Regulatory Authority, Inc. FINRA), 1 related to digital asset securities. Securities Act of 1933 (Securities Act) and the Exchange Act. On September 25, the U.S. Background.

Security 68

Security Blockchain Marketing Risk 68

The Last Watchdog

MAY 11, 2020

Related: How the Middle East has advanced mobile security regulations Over the past couple of decades, meaningful initiatives to improve online privacy and security, for both companies and consumers, incrementally gained traction in the tech sector and among key regulatory agencies across Europe, the Middle East and North America.

Computer and Electronics 113

Computer and Electronics Encryption Cybersecurity Privacy 113

Data Protection Report

JULY 26, 2017

On July 11, 2017, the US Coast Guard (USCG) and the Department of Homeland Security (DHS) proposed new cybersecurity draft guidelines for Maritime Transportation Security Act (MTSA) regulated facilities. The guidelines follow the White House’s May 2017 Executive Order to strengthen the cybersecurity of critical infrastructure.

Cybersecurity 40

Cybersecurity Risk Communications Access 40

Data Protection Report

DECEMBER 5, 2018

On 30 November 2018 the Cyber Security Protection Bureau, under the auspices of the PRC Ministry of Public Security (the “MPS”), issued a draft Guideline for Internet Personal Information Security Protection (the “Guideline”) along with a request for public comments. Introduction. technical measures; and. Management Mechanisms.

Information Security 40

Information Security Security Authentication Passwords 40

Data Matters

OCTOBER 30, 2017

*This post originally appeared in Law 360 on October 24, 2017. Responsibility for corporate cybersecurity extends from the chief information security officer’s office, to the C-suite, to the corporate boardroom. Cyber Security Beyond Cybersecurity: CLGAs. We’ve seen it happen time and again. 1] The U.S.

Compliance 60

Compliance Cybersecurity Risk Government 60

Hunton Privacy

SEPTEMBER 8, 2017

On September 7, 2017, the U.S. Together, these communications underscore key privacy and security issues for entities covered by HIPAA to help them protect individuals’ health information before, during and after emergency situations. For example, covered entities may use and disclose PHI as necessary for treatment purposes.

Compliance 49

Compliance Privacy Communications Security 49

DLA Piper Privacy Matters

OCTOBER 31, 2019

An updated draft of China’s Amended Personal Information Security Specification (“Amended PIS Specification”) and proposed new amendments to the privacy specification for mobile apps (“App Privacy Specification”) were published this week, alongside brand new draft privacy regulations for the banking sector.

Data Privacy 49

Data Privacy Privacy Data collection Data breaches 49

DLA Piper Privacy Matters

NOVEMBER 5, 2019

An updated draft of China’s Amended Personal Information Security Specification (Amended PIS Specification) and proposed new amendments to the privacy specification for mobile apps (App Privacy Specification) were published this week, alongside brand new draft privacy regulations for the banking sector. avoid excessive data collection).

Data collection 45

Data collection Data breaches Privacy Information Security 45

Hunton Privacy

MARCH 17, 2017

On March 15, 2017, the French data protection authority (the “CNIL”) published a six step methodology and tools for businesses to prepare for the EU General Data Protection Regulation (“GDPR”) that will become applicable on May 25, 2018. verifying the data security measures implemented. The six steps are summarized below.

GDPR 75

GDPR Personal data Compliance Privacy 75

Data Matters

FEBRUARY 11, 2021

On April 27, 2017, the SFO commenced an investigation into KBR Inc.’s Department of Justice and the Securities and Exchange Commission. On April 4, 2017, the SFO issued a notice to KBR UK pursuant to Section 2(3) CJA 1987 (“Section 2 notice”) requiring it to produce certain information and documents “held by KBR UK.”

IT 68

IT Compliance Privacy Security 68

Cyber Info Veritas

JULY 18, 2018

On July 2017, one of the most devastating incidents in the history of cyber attacks took place when a group of elite hackers hacked into Equifax, one of the largest credit bureaus in the globe and stole private data including social security numbers, credit card numbers etc of around 145 million clients.

Cybersecurity 40

Cybersecurity Ransomware Information Security Risk 40

Hunton Privacy

JANUARY 5, 2017

On January 3, 2017, the Office of Management and Budget (“OMB”) issued a memorandum (the “Breach Memorandum”) advising federal agencies on how to prepare for and respond to a breach of personally identifiable information (“PII”).

Data breaches 53

Data breaches Privacy Encryption Risk 53

Data Matters

JUNE 11, 2020

Securities and Exchange Commission’s (the SEC) examination and enforcement programs. For example, the Investment Group may have an employee serving on the board of directors of the company or a shareholder committee. Investment Groups may also obtain MNPI as part of the investment process.

Risk 76

Risk Compliance Access IT 76

Data Protection Report

MAY 23, 2018

These data subject rights are not new as similar rights were already in place before the GDPR in Europe (and most frequently exercised in the UK), but for organizations that are based outside the EU, this procedure may have been put in place for the first time and never put to test before. In principle, this is nothing new.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Hunton Privacy

FEBRUARY 2, 2018

The Guidelines were adopted by the Working Party on November 28, 2017, for public consultation. The Working Party should clarify that in providing information beyond what is required under the GDPR, controllers must be able to exercise their judgement on whether and how to provide such information.

GDPR 54

GDPR Privacy Paper Archiving 54

HL Chronicle of Data Protection

JUNE 17, 2019

Hong Kong’s past reforms to the PDPO have been “event driven”, the best example being the Octopus Rewards case in 2010, which led to extensive reforms to Hong Kong’s direct marketing controls. DPP 4 Analysis: Data Security. The Incident.

Personal data 40

Personal data Data breaches Security Compliance 40

Data Protection Report

DECEMBER 6, 2017

On October 28, 2017, the Turkish Data Protection Authority (the “ Authority ”) published an important regulation supplementing the Law on Protection of Personal Data (the “ Data Protection Law ”), namely the Regulation on the Deletion, Destruction and Anonymization of Personal Data (the “ Regulation ”). Overview of the Regulation.

Personal data 40

Personal data Paper Encryption Cloud 40

HL Chronicle of Data Protection

MAY 13, 2019

Of particular concern to state-level policymakers and enforcement authorities are business practices that in their view may contribute to security incidents. The insurance industry has not been immune from such scrutiny, and the imposition of business practice requirements intended to enhance cybersecurity sector-wide.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. This page will enable consumers to exercise the right to opt-out of the sale of their personal information. Anti-Discrimination Provisions.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. This page will enable consumers to exercise the right to opt-out of the sale of their personal information. Anti-Discrimination Provisions.

Privacy 58

Privacy Sales Education Compliance 58

ForAllSecure

APRIL 7, 2021

Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. I've got a lot of industry certifications, but having all those paper degrees proved to be a poor equivalent to having actual hands on experience in information security.

Cybersecurity 40

Cybersecurity Information Security IT Security 40

ForAllSecure

APRIL 7, 2021

Welcome to the hacker mind and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. I've got a lot of industry certifications, but having all those paper degrees proved to be a poor equivalent to having actual hands on experience in information security.

Cybersecurity 40

Cybersecurity Information Security IT Security 40

Data Protection Report

JUNE 4, 2018

billion – roughly 4 percent of each company’s revenue for 2017, the maximum penalty allowed under the GDPR. In addition to these high-profile examples, we are aware that a number of data controllers saw a marked increase in requests from employees and customers seeking to exercise their new rights last week.

GDPR 40

GDPR Compliance Personal data Privacy 40

Data Protection Report

SEPTEMBER 25, 2017

These changes will have a significant impact on how companies manage personal data and secure their information systems. The draft Cyber Bill was unveiled on 10 July 2017. Originally scheduled to end on 3 August 2017, the public consultation period was extended due to widespread interest in the legislation. Info-communications.

Cybersecurity 40

Cybersecurity Data breaches Personal data Compliance 40

ForAllSecure

SEPTEMBER 29, 2022

And the rest, they say is this as a reporter, I was in a position to learn as I wrote about information security. Vamosi: Welcome to the hacker mind that original podcast from for all secure. Here's the crazy thing: prior to 2017 Prior to attending DEF CON 25 Stoke never tried his hand at bug bounty. I hope you'll stick around.

Mining 40

Mining IT Communications Marketing 40

Schneier on Security

JUNE 8, 2021

Transportation Command in 2017, after learning that their computerized logistical systems were mostly unclassified and on the internet. Increasing our offensive capabilities without being able to secure them is like having all the best guns in the world, and then storing them in an unlocked, unguarded armory. weapons systems.

Military 144

Military Cybersecurity Communications Manufacturing 144

ForAllSecure

NOVEMBER 13, 2020

In this episode, Stok talks about his beginnings in enterprise security and his transition into the top tier of bug bounty hunters. Vamosi: Like a lot of us, information security wasn’t necessarily our first line of work. It kind of came on my radar somewhere around 2017. Stok: I went to DEF CON in 2017. and such.

Communications 40

Communications IT Security Mining 40

ForAllSecure

NOVEMBER 12, 2020

In this episode, Stok talks about his beginnings in enterprise security and his transition into the top tier of bug bounty hunters. Vamosi: Like a lot of us, information security wasn’t necessarily our first line of work. It kind of came on my radar somewhere around 2017. Stok: I went to DEF CON in 2017. and such.

Communications 40

Communications IT Security Mining 40

ForAllSecure

NOVEMBER 12, 2020

In this episode, Stok talks about his beginnings in enterprise security and his transition into the top tier of bug bounty hunters. Vamosi: Like a lot of us, information security wasn’t necessarily our first line of work. It kind of came on my radar somewhere around 2017. Stok: I went to DEF CON in 2017. and such.

Communications 40

Communications IT Security Mining 40

Data Matters

DECEMBER 11, 2018

For example, the Template allows for: (a) multiple grouping options (e.g., Securities and Exchange Commission (SEC) and the U.S. and the EU in September 2017. grouping based on the type of entity such as banking entities or asset managers); (b) exclusion of certain entities from its scope (e.g., territory (i.e.,

Insurance 68

Insurance Paper Risk Big data 68

ForAllSecure

FEBRUARY 23, 2021

In a few minutes I’m going to talk to a pentester who’s written a book that can help take your current skills as a sys admin and security engineer and turn them into skills needed to become a great digital pentester. You want to see if they can penetrate your security, and cause it to break in some way. I mean really?

Security 52

Security IT Education Communications 52

ForAllSecure

FEBRUARY 23, 2021

In a few minutes I’m going to talk to a pentester who’s written a book that can help take your current skills as a sys admin and security engineer and turn them into skills needed to become a great digital pentester. You want to see if they can penetrate your security, and cause it to break in some way. I mean really?

Security 52

Security IT Education Communications 52

Data Matters

SEPTEMBER 29, 2021

To pick just two recent examples of the latter, the EU’s General Data Protection Regulation1 (GDPR) and the California Consumer Privacy Act2 (CCPA) both impose sweeping requirements on businesses with the aim of increasing consumers’ privacy and control over how their personal data is used. For example, in John B.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

CILIP

NOVEMBER 7, 2020

This is a good example of how the British Council exercises ?soft In a shopping mall, for example, curious shoppers and young families experienced ?library The Harare librarian, Maynard Chipangura, visited the UK, following a tour itinerary we prepared which included attendance at the CILIP Conference in 2017. soft power?

Libraries 52

Libraries e-Delivery Government Communications 52

Troy Hunt

NOVEMBER 14, 2017

As it turns out, breaking websites is a heap of fun (with the obvious caveats) and people really get into the exercises. For example, if we take the sample vulnerable site I use in the exercises and search for "foobar", we see the following: You can see the search term - the untrusted data - in the URL: [link].

Analytics 87

Analytics Libraries IT Risk 87