CGI

DECEMBER 7, 2017

Insurers’ top trends and priorities: A look at the 2017 CGI Client Global Insights (part 2). Thu, 12/07/2017 - 15:43. In my previous blog , I introduced findings from in-person interviews CGI held in 2017 with more than 1,300 client executives across 17 countries, including insurance business and IT executives.

Insurance 40

Insurance Digital transformation GDPR Artificial Intelligence 40

CGI

DECEMBER 5, 2017

Insurers’ top trends and priorities: A look at the 2017 CGI Client Global Insights (part 2). Tue, 12/05/2017 - 17:24. In my previous blog , I introduced findings from in-person interviews CGI held in 2017 with more than 1,300 client executives across 17 countries, including insurance business and IT executives.

Insurance 40

Insurance Digital transformation GDPR Artificial Intelligence 40

The Last Watchdog

APRIL 30, 2019

Related: How NIST protocols fit SMBs The essence of the NIST CSF is showing up in the privacy regulations now being enforced in Europe, as well as in a number of U.S. and the upcoming NIST Privacy Framework. That could be for insurance purposes. “As As with any insurance, cyber insurance really requires due care.”

Cybersecurity 173

Cybersecurity Insurance Security Privacy 173

The Last Watchdog

AUGUST 1, 2019

That includes social security and social insurance numbers, bank account numbers, phone numbers, birth dates, email addresses and self-reported income; in short, just about everything on an identity thief’s wish list. Best security and privacy practices on everyone’s part is more imperative than ever.

Data Privacy 198

Data Privacy Privacy Data breaches Cloud 198

Hunton Privacy

FEBRUARY 22, 2017

On February 17, 2017, Horizon Blue Cross Blue Shield of New Jersey (“Horizon”) agreed to pay $1.1 million as part of a settlement with the New Jersey Division of Consumer Affairs (the “Division”) regarding allegations that Horizon did not adequately protect the privacy of nearly 690,000 policyholders.

Insurance 45

Insurance Privacy Encryption Passwords 45

Hunton Privacy

OCTOBER 15, 2021

The Division of Consumer Affairs alleged that the fertility clinic violated the New Jersey Consumer Fraud Act and the federal Health Insurance Portability and Accountability Act’s (“HIPAA”) Privacy and Security Rules by removing protected health information (“PHI”) safeguards.

Data breaches 103

Data breaches Privacy Insurance Information Security 103

Hunton Privacy

NOVEMBER 13, 2023

On April 22, 2019, HHS began investigating DMS after receiving a breach notification indicating that DMS’ network server was infected by the Gandcrab ransomware in April 2017. DMS is a HIPAA business associate (“BA”) that provides payer credentialing and medical billing services to HIPAA Covered Entities (“CEs”).

Ransomware 72

Ransomware Risk Insurance Encryption 72

Data Matters

JANUARY 2, 2018

This past year was marked by ever more significant data breaches, growing cybersecurity regulatory requirements at the state and federal levels and continued challenges in harmonizing international privacy and cybersecurity regulations. As we begin this New Year, here is list of the top 10 privacy and cybersecurity issues for 2018: EU GDPR.

Cybersecurity 68

Cybersecurity Privacy Data breaches GDPR 68

Hunton Privacy

NOVEMBER 8, 2023

The NYDFS, which regulates financial institutions including insurance companies, mortgage brokers and banks, adopted the original Cybersecurity Regulation in 2017. Our previous blog post covered key proposed changes to the Cyber Regulation.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

IT Governance

OCTOBER 31, 2023

Thousands of drivers have sensitive data exposed to hackers in major IT breach Date of breach: Unclear, but breached documents date back to 2017. Records breached: 512,000 documents, with details of insurance investigations, vehicle registration certificates, notices of car seizures and payment card details.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Hunton Privacy

MAY 17, 2017

On May 10, 2017, the U.S. million civil monetary penalty against Memorial Hermann Health System (“MHHS”) for alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule. . This settlement, the eighth announced this year, signals OCR’s increased enforcement of the Privacy Rule.

Privacy 49

Privacy Compliance Insurance IT 49

Hunton Privacy

MARCH 29, 2017

On March 28, 2017, the French Data Protection Authority (“CNIL”) published its Annual Activity Report for 2016 (the “Report”) and released its annual inspection program for 2017.

Personal data 49

Personal data Healthcare GDPR Insurance 49

The Last Watchdog

APRIL 3, 2019

SailPoint, which went public in November 2017, has grown to more than 1000 employees in 30 locations. Meanwhile, yet another layer of data handling protocols has arisen in the form of Europe’s General Data Protection Regulation, New York state’s Cybersecurity Requirements for Financial Services Companies and California’s Consumer Privacy Act.

Digital transformation 140

Digital transformation Insurance Compliance Healthcare 140

Hunton Privacy

JUNE 12, 2020

Mears made over one billion spoofed robocalls to sell health insurance plans under a variety of business names including Rising Eagle and JSquared Telecom. The robocalls falsely claimed to offer health insurance plans from major insurers but instead were sold by entities not affiliated in any way with those insurers.

Insurance 96

Insurance IT Communications Government 96

ARMA International

JANUARY 30, 2020

Could this genetic information lead to genetic surveillance, tracking, and grave privacy concerns for military personnel and others who use these kits?”. More than two years ago, in December 2017, the FTC also raised concerns about DTC genetic testing and encouraged consumers to be selective in choosing which DNA-testing companies to use.

Military 106

Military Privacy Risk Insurance 106

Hunton Privacy

FEBRUARY 3, 2017

On February 1, 2017, the U.S. This is the third enforcement action taken by OCR in 2017, following the respective actions taken against MAPFRE Life Insurance of Puerto Rico and Presence Health earlier in January. Children’s prior history of noncompliance with the HIPAA Privacy and Security Rules.

Privacy 40

Privacy Security Insurance Encryption 40

Hunton Privacy

JUNE 1, 2017

On May 16, 2017, the Governor of the State of Washington, Jay Inslee, signed into law House Bill 1493 (“H.B. The law will become effective on July 23, 2017. 1493”), which sets forth requirements for businesses who collect and use biometric identifiers for commercial purposes. With the enactment of H.B. With the enactment of H.B.

Privacy 87

Privacy Insurance Compliance Security 87

DLA Piper Privacy Matters

MAY 14, 2018

The Italian privacy law integrating the GDPR has been finalized by the Board of Ministers, unveiling unexpected surprises a few days before the 25th of May 2018. Below are my top 5 derogations to the GDPR provided by the Italian privacy law: 1. Criminal sanctions for privacy breaches confirmed.

GDPR 45

GDPR Privacy Systems administration Compliance 45

Hunton Privacy

APRIL 4, 2017

In March 2017, Syed Ahmad, a partner with Hunton & Williams LLP’s insurance practice, and Eileen Garczynski, partner at insurance brokerage Ames & Gough, co-authored an article, Protecting Company Assets with Cyber Liability Insurance , in Mealey’s Data Privacy Law Report. Read the full article.

Insurance 40

Insurance Data Privacy Privacy IT 40

Hunton Privacy

JANUARY 16, 2021

million civil monetary penalty imposed by the Department of Health and Human Services’ Office for Civil Rights (“OCR”) in 2017 against the University of Texas M.D. The United States Court of Appeals for the Fifth Circuit recently vacated a $4.3 Anderson Cancer Center (“MD Anderson”). OCR investigated and imposed the $4.3

Encryption 71

Encryption Privacy Insurance Security 71

DLA Piper Privacy Matters

DECEMBER 7, 2017

Two recent developments in the United Kingdom highlight the growing risk of privacy litigation and “group actions” which is likely to further increase following the enactment of the General Data Protection Regulation (“ GDPR “) in May 2018. Various Claimants v Wm Morrisons Supermarket PLC [2017] 3113.

Risk 40

Risk Privacy GDPR Data breaches 40

Hunton Privacy

DECEMBER 18, 2017

As reported in BNA Privacy Law Watch , on December 6, 2017, health care provider 21st Century Oncology agreed to pay $2.3 The settlement was made public in the company’s December 6, 2017, bankruptcy filing. The settlement was made public in the company’s December 6, 2017, bankruptcy filing. million patients.

Data breaches 53

Data breaches Insurance Information Security Risk 53

Hunton Privacy

AUGUST 28, 2018

As reported on Hunton’s Insurance Recovery blog , the Second Circuit has rejected Chubb subsidiary Federal Ins. s request for reconsideration of the court’s July 6, 2018, decision, confirming that the insurer must cover Medidata’s $4.8 million loss under its computer fraud insurance policy. July 9, 2018, 2nd Cir.

Insurance 45

Insurance Phishing Access IT 45

Hunton Privacy

JULY 24, 2017

On July 21, 2017, New Jersey Governor Chris Christie signed a bill that places new restrictions on the collection and use of personal information by retail establishments for certain purposes. to record, retain or transmit information by a covered entity pursuant to the Health Insurance Portability and Accountability Act of 1996.

Privacy 40

Privacy Retail Insurance Sales 40

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. systemic risk of insurers with other parts of the financial system, notably the banking.

Insurance 68

Insurance Paper Risk Big data 68

eDiscovery Daily

JANUARY 9, 2018

But first, it’s also worth noting that Tom O’Connor and I will be discussing some of these cases – and what the legal profession can learn from those rulings – on Thursday’s webcast Important eDiscovery Case Law Decisions of 2017 and Their Impact on 2018 at noon CT (1pm ET, 10am PT). POSSESSION, CUSTODY AND CONTROL. You decide.

e-Discovery 39

e-Discovery Computer and Electronics Communications Cloud 39

Hunton Privacy

MARCH 16, 2017

On March 9, 2017, AllClear ID hosted a webinar with Hunton & Williams partner and chair of the Global Privacy and Cybersecurity practice Lisa J. Sotto points out that these regulations will “affect companies far and wide,” including “any vendor that touches a New York banking, insurance or financial organization.”.

Financial Services 40

Financial Services Insurance Cybersecurity Privacy 40

DLA Piper Privacy Matters

SEPTEMBER 6, 2023

The DPDP Act is India’s first comprehensive law on the protection of personal data and comes six years after the Supreme Court of India first declared a fundamental right to privacy in the Puttaswarmy case in 2017. payments, insurance etc).

Personal data 111

Personal data GDPR Data breaches Compliance 111

DLA Piper Privacy Matters

NOVEMBER 26, 2018

The top five industry sectors notifying data breaches are: 1) health care, 2) insurance, 3) public administrations and defense, 4) telecoms and 5) financial services. In six months only, the DPA received: 3599 information requests (compared to 2145 information requests in 2017). The other released figures are also remarkable.

GDPR 83

GDPR Data breaches Financial Services Insurance 83

Hunton Privacy

JANUARY 25, 2017

On January 18, 2017, the U.S. Department of Health and Human Services’ Office for Civil Rights (“OCR”) entered into a resolution agreement with MAPFRE Life Insurance Company of Puerto Rico (“MAPFRE”) relating to a breach of protected health information (“PHI”) contained on a portable storage device.

Security awareness 40

Security awareness Insurance Risk Compliance 40

Data Protection Report

AUGUST 8, 2017

The German federal labor court held in a recent decision ( Bundesarbeitsgericht , 27 July 2017 – case no. 2 AZR 681/16) that the use of evidence obtained through the use of key logger software is not permitted under current German privacy law, if there is no suspicion of a criminal offense.

Computer and Electronics 40

Computer and Electronics Insurance Privacy GDPR 40

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. 20, 2017). 3 See SEC Chairman Jay Clayton, Statement on Cybersecurity (Sept.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

Consumer privacy rights in California are well established. The California Constitution expressly grants California citizens a right to privacy. The International Association of Privacy Professionals estimates at least 500,000 U.S. The ballot initiative largely mirrored what is now the language in the CCPA.

Privacy 58

Privacy Sales Compliance Cybersecurity 58

ARMA International

FEBRUARY 21, 2020

A company in Wisconsin had a “chipping party” in 2017 to implant microchips in some of its employees to make it easier for them to access the buildings and systems and to buy food in the company break room. [1]. Legal issues related to the IoB span the domains of privacy, ownership, ethics, and beyond. It has never been able to do so.

Computer and Electronics 105

Computer and Electronics Privacy Artificial Intelligence IoT 105

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

Consumer privacy rights in California are well established. The California Constitution expressly grants California citizens a right to privacy. The International Association of Privacy Professionals estimates at least 500,000 U.S. The ballot initiative largely mirrored what is now the language in the CCPA.

Privacy 58

Privacy Sales Education Compliance 58