Hunton Privacy

MAY 3, 2021

Data Protection Policy Based On Hierarchical Classification and Category. Nonetheless, the Draft DSL does not provide the definition of important data, which may be defined in future implementing rules. Licensable Data Processing Service.

Security 111

Security Cybersecurity Data collection Government 111

eSecurity Planet

DECEMBER 22, 2021

The regulations from GDPR, PIPL, and CCPA are especially prevalent to MSPs and software vendors because they get access to data from so many organizations, but all businesses need to comply with them. Categories for all of your organization’s data: Not every piece of information will be relevant to CCPA and require the same level of security.

GDPR 144

GDPR Compliance Data Privacy Privacy 144

IT Governance

NOVEMBER 28, 2023

This week, we’re taking a slightly different approach with the ‘publicly disclosed data breaches and cyber attacks’ category, presenting the most interesting data points in a table format. The ‘enforcement’ and ‘other news’ categories remain unchanged. Only 3 definitely haven’t had data breached.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. 2 Common Types of Encryption The two main types of encryption categories are symmetric and asymmetric. Symmetric encryption uses a single key to encrypt and decrypt data.

Encryption 113

Encryption IT Passwords IoT 113

DLA Piper Privacy Matters

MAY 11, 2020

Create an operationally significant limited exception to deletion and access rights for many types of unstructured data. Amend the second threshold of the definition of a “business” to remove “devices.” Enforcement and fines. Right to correct inaccurate personal information.

Privacy 52

Privacy Unstructured data Access Data collection 52

IBM Big Data Hub

FEBRUARY 23, 2024

The only processing operations exempt from the GDPR are national security and law enforcement activities and purely personal uses of data. Identify and protect special category data When inventorying data, organizations should make a note of any especially sensitive data that requires extra protection.

GDPR 76

GDPR Compliance Personal data Privacy 76

Data Matters

APRIL 10, 2020

While the world seems to have ground to a halt in so many ways, time still marches on, and along with it, the California Consumer Privacy Act (“CCPA”) enforcement date (July 1, 2020) inches ever closer. through their websites) to a particular consumer or household.

Privacy 68

Privacy Sales Insurance Compliance 68

Data Protection Report

NOVEMBER 14, 2023

2 In addition, the SEC alleged that while SolarWinds claimed it had a strong password policy, in reality it failed to enforce or comply with its own password policy on multiple occasions. 4 This statement was false, according to the SEC, because at this point, SolarWinds knew the risk was definitive, not merely hypothetical.

Cybersecurity 115

Cybersecurity IT Risk Passwords 115

Data Protection Report

JULY 3, 2019

individual contractors from the CCPA definition of “consumers.” Also, driver’s license data that is purchased from local government records databases would not be exempted from CCPA protections if it is used for a purpose that is not compatible with the purpose for which the data is maintained (e.g. AB 25:” employee exception”.

Access 40

Access Privacy Data Privacy Government 40

DLA Piper Privacy Matters

NOVEMBER 16, 2021

Notably it includes a host of new, onerous regulatory approval and governance requirements for personal data controllers, organisations processing “important data” and operators of online platforms/e-commerce sites, including in the context of corporate transactions. It is clear that this remains an enforcement priority.

Compliance 118

Compliance Personal data Security Risk 118

DLA Piper Privacy Matters

AUGUST 23, 2021

We have summarised the key compliance obligations under the PIPL below, with new obligations in bold for ease of reference: Relevant Laws/Regulations The PIPL becomes the primary, national-level law governing processing of personal information, but does not replace the existing data privacy framework.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Hunton Privacy

JUNE 29, 2018

Definition of Personal Information. This definition of personal information aligns more closely with the EU General Data Protection Regulation’s definition of personal data. This definition of personal information aligns more closely with the EU General Data Protection Regulation’s definition of personal data.

Privacy 55

Privacy Sales Personal data Communications 55

DLA Piper Privacy Matters

AUGUST 3, 2021

However, since Schrems II and the uptake in enforcement regarding data transfers, [1] using the new SCCs requires careful consideration as, for example, the suspension or termination of a data transfer is no longer a mere theoretical situation. Another scenario might be that the supervisory authority orders the suspension of a data transfers.

IT 119

IT Personal data Compliance Risk 119

eSecurity Planet

SEPTEMBER 23, 2022

Those changes enforced independent financial auditing of companies and required every board of directors to retain at least one financial expert to ensure the board of directors understands those independent audits. See the top Governance, Risk & Compliance (GRC) tools. Proposed SEC Security Changes.

Cybersecurity 132

Cybersecurity Compliance Risk Communications 132

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA’s definition of “consumer” is equally broad. This definition therefore not only encompasses a “consumer” in the traditional sense (i.e.,

Privacy 58

Privacy Sales Compliance Cybersecurity 58

DLA Piper Privacy Matters

JANUARY 11, 2021

As in many other recent legislative proposals, the Commission also envisages stronger enforcement and supervision of the rules. It is also clarified that data centre services other than cloud computing services are as well covered by the Directive and provides for a definition of this concept. Extended scope.

Cybersecurity 91

Cybersecurity Computer and Electronics Manufacturing Cloud 91

Thales Cloud Protection & Licensing

AUGUST 15, 2019

The CCPA uses a very broad definition of what constitutes as Personal Information (PI), defining PI as “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” 4) The right of Californians to access their PI.

Privacy 92

Privacy GDPR Digital transformation Sales 92

Collibra

MARCH 9, 2022

Collibra Data Intelligence Cloud unifies data catalog, governance, data lineage, data quality and data privacy capabilities in one complete, flexible and easy-to-use platform. As the list of discoverable data types grows, the compute challenge increases, leading to inefficient and unscalable data discovery and data quality enforcement.

Cloud 52

Cloud Metadata Data Privacy Access 52

IBM Big Data Hub

APRIL 11, 2024

The global AI governance landscape is complex and rapidly evolving. Key themes and concerns are emerging, however government agencies must get ahead of the game by evaluating their agency-specific priorities and processes. The term governance can be slippery.

Government 74

Government Education Artificial Intelligence Risk 74

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA’s definition of “consumer” is equally broad. This definition therefore not only encompasses a “consumer” in the traditional sense (i.e.,

Privacy 58

Privacy Sales Education Compliance 58

Data Protection Report

JUNE 29, 2018

The law is enforceable in California and applies to California users, but given the nature of data processing, most companies will need to consider whether to apply the rules to all users. It also requires a description of consumers’ rights and the categories of personal information the business has sold in the preceding 12 months.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

The law is enforceable in California and applies to California users, but given the nature of data processing, most companies will need to consider whether to apply the rules to all users. It also requires a description of consumers’ rights and the categories of personal information the business has sold in the preceding 12 months.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

AUGUST 16, 2017

On the 7 th August 2017, the UK’s Government Department for Digital, Culture, Media and Sport issued a Statement of Intent (the Statement ) outlining its planned reforms of the UK’s data protection laws which are to be implemented by the Data Protection Bill (the Bill ).

Government 40

Government GDPR Personal data Insurance 40

Data Matters

JUNE 29, 2018

AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected. The definition of personal information under AB 375 is expansive.

GDPR 79

GDPR Privacy Sales Data breaches 79

HL Chronicle of Data Protection

OCTOBER 3, 2018

The statute’s most direct reference to geography comes in the definition of “business” (the class of entities which are subject to most CCPA requirements), which requires that an entity subject to the law “does business” in California. 3. Definition of Personal Data/Information. 1. Geographic Scope.

GDPR 55

GDPR Privacy Personal data Sales 55

Data Protection Report

SEPTEMBER 17, 2019

Changes range from clarifications to definitions and new exemptions to technical corrections. Section (a)(2) is amended to permit the consumer to request that the business notifies a consumer of the categories of personal information sold for “each category of third party”, rather than “each third party.” Medical staff member.

B2B 40

B2B Privacy Communications Encryption 40

Data Matters

AUGUST 5, 2019

The law broadens the definition of “private information” which sets forth the information elements that, if breached, could trigger a notification obligation. The Stop Hacks and Improve Electronic Data Security Act.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

HL Chronicle of Data Protection

MAY 26, 2020

Transparency and Data Governance. Expands the information that a business must include in the pre-collection notice, to include: The categories of sensitive personal information collected and whether they are sold or shared; and. Enforcement. Pre-collection Notice (modification). Storage Limitation (new). Individual Rights.

Privacy 66

Privacy Compliance Sales Data Privacy 66

Hunton Privacy

SEPTEMBER 1, 2018

On August 31, 2018, the California State Legislature passed SB-1121 , a bill that delays enforcement of the California Consumer Privacy Act of 2018 (“CCPA”) and makes other modest amendments to the law. The bill now goes to the Governor for signing. The provisions of the CCPA will become operative on January 1, 2020. CCPA § 1798.185(a)).

Privacy 49

Privacy Data collection Sales Data breaches 49

Data Protection Report

JANUARY 6, 2020

In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. Data retention is a rising trend in GDPR enforcement. GDPR wasn’t the beginning and it’s definitely not the end. Conquer the world!

Privacy 85

Privacy GDPR Data breaches Risk 85

Data Matters

JUNE 29, 2018

AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected. The definition of personal information under AB 375 is expansive.

GDPR 60

GDPR Privacy Sales Data breaches 60

HL Chronicle of Data Protection

OCTOBER 3, 2018

The statute’s most direct reference to geography comes in the definition of “business” (the class of entities which are subject to most CCPA requirements), which requires that an entity subject to the law “does business” in California. 3. Definition of Personal Data/Information. 1. Geographic Scope.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The statute’s most direct reference to geography comes in the definition of “business” (the class of entities which are subject to most CCPA requirements), which requires that an entity subject to the law “does business” in California. 3. Definition of Personal Data/Information. 1. Geographic Scope.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

JUNE 28, 2018

For instance, the definition of “personal information” in the Act is incredibly broad. The Act enshrines a consumer’s right to know what personal information a business collects about them specifically and the categories of third parties to whom his or her information is sold or otherwise disclosed.

Privacy 40

Privacy GDPR Marketing Data breaches 40

Data Protection Report

JUNE 6, 2019

Although the concept of providing consumers certain privacy rights is similar, the law has some significant differences from the CCPA, including the definition of “sale”. Unlike CCPA, the new law has no provisions relating to access or deletion or a private right of action relating to breaches.

Sales 40

Sales Privacy Insurance Manufacturing 40

Data Protection Report

JANUARY 6, 2020

In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. Data retention is a rising trend in GDPR enforcement. GDPR wasn’t the beginning and it’s definitely not the end. Conquer the world!

Privacy 52

Privacy GDPR Data breaches Risk 52

Data Protection Report

AUGUST 12, 2019

2) Will employers be exempted from other CCPA requirements, such as access, deletion and opt out?; (3) Next, AB 874 would redefine “personal information” to exclude information from government records. Article 3: CCPA definition of personal information. Our other CCPA articles: Article 1: Summary of CCPA’s major provisions.

Manufacturing 40

Manufacturing Sales Privacy Data Privacy 40