Data Protection Report

NOVEMBER 2, 2023

On November 1, 2023, the New York Department of Financial Services (NYDFS) finalized the second amendment to its cybersecurity regulations, which are available here. c)), or Monday, April 29, 2024. NYDFS stated: The Department has revised the language of § 500.17(a) Most changes will take effect in 180 days (500.22(c)),

Cybersecurity 105

Cybersecurity Compliance Financial Services Government 105

IT Governance

NOVEMBER 23, 2023

Perhaps even more concerning to EU lawmakers is how dependent society at large is on banking and other financial services. In turn, financial institutions heavily depend on ICT to be able to provide those services to begin with. Simply losing access to an asset, for example, can be just as problematic.

Risk 104

Risk Data breaches Authentication Financial Services 104

Security Affairs

FEBRUARY 20, 2024

pic.twitter.com/SvpbeslrCd — vx-underground (@vxunderground) February 19, 2024 The operation led to the arrest of two members of the ransomware gang in Poland and Ukraine and the seizure of hundreds of crypto wallets used by the group. Lockbit ransomware group administrative staff has confirmed with us their websites have been seized.

Energy and Utilities 106

Energy and Utilities Ransomware Manufacturing Agriculture 106

IT Governance

JANUARY 16, 2024

GB Rebekah Children’s Services Source (New) Non-profit USA Yes 2,805 Butte School District Source 1 ; source 2 (Update) Education USA Yes 2,658 Dignity Health Nevada St. Source (New) Real estate USA Yes 10 GB Unitex Source (New) Manufacturing USA Yes 9.5

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

JANUARY 23, 2024

Microsoft gives all businesses access to AI-powered Office features When Microsoft launched Copilot for Office 365 in November 2023, it required enterprise customers to have at least 300 users. Subscribe now The post The Week in Cyber Security and Data Privacy: 15 – 21 January 2024 appeared first on IT Governance UK Blog.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Data Protection Report

APRIL 9, 2024

On March 27, 2024, the Cybersecurity and Infrastructure Security Agency (“CISA”) published a Notice of Proposed Rulemaking for the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”), which imposes new reporting requirements for entities operating in critical infrastructure sectors.

Ransomware 83

Ransomware Agriculture Cybersecurity Government 83

Hunton Privacy

FEBRUARY 28, 2024

As reported on the Hunton Employment & Labor Perspectives blog , on February 15, 2024, California lawmakers introduced the bill AB 2930. AB 2930 aims to prevent algorithmic discrimination through impact assessments, notice requirements, governance programs, policy disclosure requirements and providing for civil liability.

Artificial Intelligence 58

Artificial Intelligence Government Risk Financial Services 58

IT Governance

APRIL 29, 2024

million to settle a complaint alleging that the home security camera company Ring “allowed employees and contractors to access consumers’ private videos and failed to implement security protections, enabling hackers to take control of consumers’ accounts, cameras, and videos”. iSharing is used by more than 35 million users.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

Thales Cloud Protection & Licensing

FEBRUARY 28, 2024

How better key management can close cloud security gaps troubling US government madhav Thu, 02/29/2024 - 05:38 In my first blog on this topic I noted a Treasury Department report released last year listed six cloud security challenges financial sector firms face. This hack included US Government networks.

Cloud 77

Cloud Government Encryption Security 77

Thales Cloud Protection & Licensing

MARCH 14, 2024

Keeping Customer Data Safe: AI's Privacy Paradox andrew.gertz@t… Thu, 03/14/2024 - 17:38 AI's appeal lies in its ability to personalize and streamline customer experiences in ways previously unimaginable. This finding is backed up by the Thales 2024 Consumer Digital Trust Index, “Building Digital Experiences that Enhance Consumer Trust.”

Privacy 71

Privacy Data Privacy Analytics Risk 71

Security Affairs

DECEMBER 10, 2023

billion personal records compromised by data breaches in past two years — underscoring need for end‑to‑end encryption Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter)

Security 94

Security Ransomware Data breaches Phishing 94