Remove links-resources
article thumbnail

$8 million penalty to NYDFS – and another case of over-retention

Data Protection Report

On January 3, 2024, the New York Department of Financial Services announced a consent order with GGT, where GGT agreed to pay NYDFS $8 million and to surrender its BitLicense (for cryptocurrency trading), due to alleged violations of NYDFS’ cybersecurity and its virtual currency regulations.

article thumbnail

Regulatory Update: NAIC Summer 2019 National Meeting

Data Matters

The National Association of Insurance Commissioners (NAIC) held its Summer 2019 National Meeting (Summer Meeting) in New York City from August 3 to 6, 2019. The amended regulation took effect on August 1, 2019, for annuity products and will become effective on February 1, 2020, for life insurance products.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Big California Privacy News: Legislative and Enforcement Updates

Data Matters

For businesses operating in California or whose websites, products or services reach California residents, these changes mean new compliance obligations, some of which could require significant investments of time and resources. If this bill becomes law, it will be effective beginning January 1, 2023.

Privacy 197
article thumbnail

Record Retention is a Key Component of Your Privacy and Cyber Compliance Program

Data Protection Report

In 2019, we saw regulators put a renewed focus on how long businesses retain personal information. Likewise, the New York State Department for Financial Services regulations requires relevant entities to have appropriate record retention policies and procedures. Why should this be a high priority project? In the U.S.,

Privacy 144
article thumbnail

Takeaways From CCPA Public Forums

Data Matters

Speakers also asked for clarity about how the CCPA requirements will apply to employee personal information collected in connection with routine human resources processes. For example, a company might track a user’s web browsing to facilitate online advertisements, but not link the data to a specific consumer. 1798.125(a).

Sales 74
article thumbnail

Ransomware Protection in 2021

eSecurity Planet

The most common way for criminals to infect an organization is by sending an email with a malicious link or attachment that an employee clicks on unwittingly to initiate an attack. The internet is fraught with peril these days, but nothing strikes more fear into users and IT security pros than the threat of ransomware. How ransomware works.

article thumbnail

Assessing the Impact of the Barbados’ Proposed Data Protection Bill on the Barbadian Private Sector

Data Matters

In Barbados, the public consultation on a draft privacy bill has already taken place and an amended bill has been presented to a Joint Select Committee of both Houses of the Barbados Parliament on May 31, 2019. The BDPA was passed by the BDPA on July 24, 2019 and now awaits the Governor-General’s signature. An Overview of the BDPA.