Reltio

JUNE 12, 2020

1 sentence company description: DataZed is a consultancy that works with organizations to improve their data quality, data governance and data strategy. 1-2 Previous Roles & Companies: Worked as a consultant with general insurers, Lloyd’s market firms, brokers and reinsurers, including Beazley Group and RSA.

Insurance 52

Insurance Customer Experience B2B MDM 52

Hunton Privacy

AUGUST 10, 2017

On August 9, 2017, Nationwide Mutual Insurance Co. million settlement with attorneys general from 32 states in connection with a 2012 data breach that exposed the personal information of over 1.2 In October 2012, Nationwide and its affiliate, Allied Property & Casualty Insurance Co. Nationwide”) agreed to a $5.5

Data breaches 45

Data breaches Insurance Data collection Risk 45

DLA Piper Privacy Matters

MAY 5, 2020

Main takeaways from the EDBP guidelines are: Connected vehicles raise various privacy and data protection concerns, such as the lack of control and information asymmetry, the risk of excessive data collection; the risk of unlawful further processing of personal data; Most data associated with connected vehicles are considered as personal data (e.g.

Privacy 69

Privacy Personal data GDPR Insurance 69

Hunton Privacy

NOVEMBER 6, 2019

After conducting onsite inspections in June 2017 and March 2019, the Berlin Commissioner noticed that Deutsche Wohnen SE was retaining personal data of tenants for an unlimited period, without examining whether the retention was legitimate or at all necessary. After the inspection of 2017, Deutsche Wohnen SE improved its archiving system.

GDPR 79

GDPR Archiving Personal data Insurance 79

Hunton Privacy

DECEMBER 1, 2020

The group has diversified its activities into the banking and insurance, travel agency and e-commerce sectors. Between June 8, 2018 and April 6, 2019, the CNIL received 15 complaints from individuals relating to the exercise of their data protection rights with affiliates of the Carrefour Group. and carrefour-banque.fr

GDPR 91

GDPR Personal data Data collection Marketing 91

DLA Piper Privacy Matters

SEPTEMBER 6, 2023

Summary of key requirements under the DPDP Act Scope of the DPDP Act: The DPDP Act is applicable to the processing of “digital personal data”, which includes personal data collected either digitally, or collected in a non-digitised form and subsequently converted into digital form. payments, insurance etc).

Personal data 111

Personal data GDPR Data breaches Compliance 111

IBM Big Data Hub

SEPTEMBER 28, 2023

Business-targeted, IBM-developed foundation models built from sound data Business leaders charged with adopting generative AI need model flexibility and choice. They also need secured access to business-relevant models that can help accelerate time to value and insights. The synthetic data generator service in watsonx.ai

Risk 94

Risk Insurance Data collection Libraries 94

DLA Piper Privacy Matters

AUGUST 23, 2021

This aligns with other recent guidance putting clearer parameters around use of biometric data in China). Purposes/Restrictions on Use Collection and processing of data must be directly related to the purpose of processing specified in the privacy notice. Excessive data collection must be avoided.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Collibra

JUNE 23, 2023

They are the California Consumer Privacy Act (CPRA), the Health Insurance Portability and Accountability Act (HIPAA), the FBI’s Criminal Justice Information Services (or CJIS), and many more. At the same time, there is a pressing need for increased regulation of data brokers to prevent them from operating without accountability.

Privacy 84

Privacy Government Data Privacy Data breaches 84

ARMA International

FEBRUARY 21, 2020

A company in Wisconsin had a “chipping party” in 2017 to implant microchips in some of its employees to make it easier for them to access the buildings and systems and to buy food in the company break room. [1]. Case law is beginning to address data collection and data privacy issues associated with the IoB.

Computer and Electronics 105

Computer and Electronics Privacy Artificial Intelligence IoT 105

Data Matters

JUNE 22, 2022

In practice, this carve out largely may be meaningless to businesses because they rarely will collect personal data only for payment purposes, especially where payments are made by the same person submits an order for goods or services that needs to be fulfilled. Data Subject Rights – New Obligation to Create Revocation Mechanism.

Data Privacy 88

Data Privacy Privacy Personal data Sales 88

Information Matters

SEPTEMBER 17, 2018

Many of the devices which make up the Internet of Things (IoT) and the apps we use on our phones are throwing off data at increasing speed and volume. The data collected from these technologies is not only leading to a better understanding of ways to improve operating efficiencies but also to create new services and revenue streams.

Artificial Intelligence 40

Artificial Intelligence Insurance Data collection Sales 40

Thales Cloud Protection & Licensing

JULY 12, 2018

As I often highlight in my blogs, data breaches have become all too common, and these continue to have a negative influence on corporate reputation and brand image, resulting in reduced market value and revenues. Protecting the integrity and confidentiality of data collected by all connected devices.

IoT 72

IoT Encryption Agriculture Data collection 72

IBM Big Data Hub

FEBRUARY 23, 2024

Marketing and sales: Conversational AI has become an invaluable tool for data collection. It assists customers and gathers crucial customer data during interactions to convert potential customers into active ones. This data can be used to better understand customer preferences and tailor marketing strategies accordingly.

Analytics 105

Analytics Artificial Intelligence Marketing Education 105

Data Protection Report

JULY 9, 2018

South Carolina ( H4655 ) – South Carolina imposes heightened breach notification and security requirements on the insurance industry. Moreover, the Insurance Commissioner must be notified within 72 hours of a security breach.

GDPR 40

GDPR Data breaches Personal data Insurance 40

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. The bill uses the same definition of “genetic data” as provided for in AB-825.

Privacy 98

Privacy Insurance Security Data breaches 98

Hunton Privacy

DECEMBER 15, 2017

Injuries 101 : The first panel discussed negative outcomes that arise from unauthorized access to and misuse of consumers’ personal data. The panel also discussed considerations businesses take into account when choosing privacy and data security practices, and consumer decision making regarding sharing their information.

Privacy 42

Privacy Retail Risk Insurance 42

eSecurity Planet

MARCH 17, 2023

Definition, Threats & Protections 10 Network Security Threats Everyone Should Know Network Security Tools at a Glance Network Security Type Purpose Vulnerability Scanning and Management Security and vulnerability life cycle management for cross-functional teams Threat Intelligence and Detection External threat feed processing, consolidation, and (..)

Security 115

Security Encryption Analytics Cloud 115

Data Matters

JUNE 29, 2018

AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected.

GDPR 79

GDPR Privacy Sales Data breaches 79

DLA Piper Privacy Matters

SEPTEMBER 29, 2017

In particular, the AU-054 does not cover fraud prevention systems implemented by insurance, capitalization, reassurance, assistance companies or insurance brokers CMF (these companies must refer to Single Authorization No. Strict requirements regarding access rights and management of the fraud prevention/detection system.

Personal data 40

Personal data Financial Services Risk Insurance 40

Krebs on Security

DECEMBER 29, 2022

Several strong themes emerged from 2022’s crop of breaches, including the targeting or impersonating of employees to gain access to internal company tools; multiple intrusions at the same victim company; and less-than-forthcoming statements from victim firms about what actually transpired. com, which was fed by pig butchering scams.

Passwords 233

Passwords Ransomware Computer and Electronics Encryption 233

Data Matters

JUNE 29, 2018

AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected.

GDPR 60

GDPR Privacy Sales Data breaches 60

DLA Piper Privacy Matters

NOVEMBER 19, 2018

processing on a large scale of special categories of data referred to in Article 9 (1) or of a personal data relating to criminal convictions and offences referred to in Article 10; or. when the data controller has a doubt, it is also advisable to proceed to a DPIA. in the automotive insurance sector); Monitoring.

Data Privacy 40

Data Privacy IT GDPR Privacy 40

eSecurity Planet

MAY 5, 2021

Clients also have full access to Rapid7’s cloud SIEM InsightIDR for internal use. Full access to Rapid7 InsightIDR. This framework is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. Rapid7 offers a few additional benefits along with its MDR service.

Cloud 57

Cloud Compliance Artificial Intelligence Analytics 57

Data Protection Report

MAY 23, 2018

We have shared below some interesting points that we’ve seen arising recently, all of which relate to how things are likely to develop from today onwards, including enforcement predictions, challenges related to operationalizing data subject access procedures, and how the GDPR may change the data privacy litigation landscape in Europe.

GDPR 40

GDPR Personal data Compliance Data breaches 40

Data Matters

JUNE 9, 2021

NHS Digital (the national custodian for health and care data in England) in May 2021, announced a new data sharing initiative called the General Practice Data for Planning and Research (GPDPR) service. Once collected, the data will be combined to create a single, national data lake.

Healthcare 79

Healthcare Data collection Personal data GDPR 79

Data Matters

OCTOBER 22, 2019

be “accessible to consumers with disabilities” by, at a minimum, letting consumers with disabilities know how to access the notice in an alternative format. Finally, the regulations make clear that, if a business does not provide the relevant notice, it shall not collect personal information from the consumer.

Privacy 60

Privacy Sales Paper Compliance 60

eSecurity Planet

SEPTEMBER 16, 2022

Banks, financial services, and insurance companies are especially vulnerable to fraud due to their access to large amounts of money and sensitive information for customers and employees alike. As the volume of data collected increases, users may experience slower processing times than they expect.

Analytics 109

Analytics Risk Authentication Financial Services 109

Schneier on Security

SEPTEMBER 7, 2023

The new site 404 Media has a good article on how hackers are cheaply getting personal information from credit bureaus: This is the result of a secret weapon criminals are selling access to online that appears to tap into an especially powerful set of data: the target’s credit header.

Personal data 101

Personal data Insurance Access Data collection 101

erwin

APRIL 18, 2019

These include: Medical information covered by the Confidentiality of Medical Information Act (CMIA) and the Health Insurance Portability and Accountability Act (HIPAA). What about access requests? . Under the GDPR, organizations must make any personal data collected from an EU citizen available upon request.

GDPR 81

GDPR Compliance Privacy Personal data 81

The Last Watchdog

SEPTEMBER 20, 2019

Eventually, governments will address the risk by beefing up security and purchasing cyber insurance, which go hand in glove. SMBs tend not to have ready access a dedicated security operations center (SOC) or an army of analysts and security techs. Ransomware attacks against local government entities at some point will run its course.

Ransomware 153

Ransomware Government Retail Security 153

eSecurity Planet

OCTOBER 11, 2022

In the world of cybersecurity, the path of least resistance has consistently been shown to be the human element, specifically user accounts with enough access privileges or credentials for the cybercriminal to execute their plan. This might be due in part to the small sample size of bot attacks that researchers had access to, however.

Analytics 122

Analytics Cybersecurity IT Data breaches 122

Data Matters

APRIL 23, 2018

Encrypting critical data assets. Using appropriate access controls. Boards should have adequate access to cybersecurity expertise, and discussions about cyber-risk management should be given regular and adequate time on board meeting agendas. Using Appropriate Access Controls. Aligning cyber risk with corporate strategy.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60

IT Governance

APRIL 29, 2024

Known data breached Discord (via Spy.pet) Source (New) IT services USA Yes 4,186,879,104 Baidu, Inc., New guidance EDPB publishes information on Data Protection Framework redress mechanism The European Data Protection Board’s Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

Data Matters

MARCH 4, 2021

These are (i) government entities; (ii) entities subject to the Gramm-Leach-Bliley Act; (iii) entities subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and Health Information Technology for Economic and Clinical Health Act; (iv) nonprofits; and (v) institutions of higher education. Controllers must.

Personal data 74

Personal data GDPR Sales Privacy 74

Collibra

JANUARY 28, 2022

Because this sort of privacy is so near and dear to us—and so important for everyone to understand and be aware of—we want to do our best to open the door to understanding data privacy, using this day as an access point to start the conversation. Some data privacy laws —like the U.S.

Data Privacy 52

Data Privacy Privacy Insurance Data collection 52

Krebs on Security

MAY 18, 2022

for “deceptive statements” the company and its founder allegedly made over how they handle facial recognition data collected on behalf of the Internal Revenue Service , which until recently required anyone seeking a new IRS account online to provide a live video selfie to ID.me. would be permanently deleted.

Government 236

Government Insurance Data collection Paper 236