article thumbnail

Two States Enact Insurance Data Security Laws

Hunton Privacy

In April 2022, two states enacted insurance data security legislation based on the National Association of Insurance Commissioners (“NAIC”) Insurance Data Security Model Law (MDL-668). Kentucky’s law goes into effect on January 1, 2023.

Insurance 110
article thumbnail

Vermont Enacts Insurance Data Security Law

Hunton Privacy

515 , making Vermont the twenty-first state to enact legislation based on the National Association of Insurance Commissioners Insurance Data Security Model Law (“MDL-668”). Cybersecurity Event Investigation and Notification Requirements. Licensees must maintain records about these cybersecurity events for at least five years.

Insurance 107
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

HHS Office for Civil Rights Publishes Cybersecurity Resource for HIPAA Implementation

Hunton Privacy

On February 16, 2024, the U.S. The publication features guidance and recommendations for cybersecurity measures for HIPAA covered entities to consider in the development of their information security programs, a requirement of HIPAA’s Security Rule.

article thumbnail

Top financial services trends of 2024

IBM Big Data Hub

The start of 2024 brings forth many questions as to what we can expect in the year ahead, especially in the financial services industry, where technological advances have skyrocketed and added complexities to an already turbulent landscape. One example of this is in insurance.

article thumbnail

Greylock McKinnon Associates data breach exposed DOJ data of 341650 people

Security Affairs

Greylock McKinnon is investigating the data breach with the help of third-party cybersecurity specialists, they also notified law enforcement of the incident. The data breach occurred on May 30, 2023, and was discovered on February 7, 2024. The company announced that it deleted DOJ data from its systems after the incident.

article thumbnail

NYDFS Updates Its Cybersecurity Regulation to Protect Against Growing Cyber Threats

Hunton Privacy

On November 1, 2023, New York Governor Hochul announced that the New York State Department of Financial Services (“NYDFS”) amended its Cybersecurity Regulation applicable to covered financial institutions. The amended Cybersecurity Regulation will take effect in phases.

article thumbnail

ICYMI –December in privacy and cybersecurity

Data Protection Report

On December 9, 2023, the California Privacy Protection Agency (CPPA) met to discuss, among many other topics, three proposed draft regulations that were required by the California Privacy Rights Act (CPRA) amendment to the California Consumer Privacy Act (CCPA): Automated Decision-Making Technology, Cybersecurity Audits, and Risk Assessments.

Privacy 110