eSecurity Planet

AUGUST 9, 2022

And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. See the Top Governance, Risk and Compliance (GRC) Tools. Relatedly, PIPL outlines some categories of sensitive information that do not receive additional protection under GDPR.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Data Protection Report

DECEMBER 17, 2020

On 25 November 2020, the European Commission ( EC ) published its proposed Data Governance Regulation (the DGR ), which will create a new legal framework to encourage the development of a European single market for data. What are the objectives of the Data Governance Regulation? This is part one of a series of three blog posts.

Government 102

Government Personal data Marketing Artificial Intelligence 102

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Schools, hospitals and government agencies all fall under GDPR authority. Useful definitions The GDPR uses some specific terminology.

GDPR 84

GDPR Compliance Personal data Privacy 84

Data Matters

NOVEMBER 4, 2020

Changes to the Definition of Businesses Subject to the CPRA. The CPRA adjusts its definition of a “business” as defined by the CCPA; broadening the scope in some cases, and narrowing it in others. The CPRA expanded the definition of a business in several respects. However, in some cases, the definition of “business” is narrowed.

Privacy 122

Privacy B2B Sales Data breaches 122

erwin

JUNE 26, 2020

Organizations need a data catalog because it enables them to create a seamless way for employees to access and consume data and business assets in an organized manner. Sales are measured down to a zip code territory level across product categories. Do employees have remote access to essential systems?

Metadata 132

Metadata Unstructured data Compliance Sales 132

eSecurity Planet

DECEMBER 22, 2021

The regulations from GDPR, PIPL, and CCPA are especially prevalent to MSPs and software vendors because they get access to data from so many organizations, but all businesses need to comply with them. Categories for all of your organization’s data: Not every piece of information will be relevant to CCPA and require the same level of security.

GDPR 144

GDPR Compliance Data Privacy Privacy 144

Collibra

NOVEMBER 2, 2020

The California Consumer Privacy Act (CCPA) came into effect four years after the General Data Protection Regulation (GDPR) was adopted. It may also lead to inconsistent definitions of personal information, thus complicating the process of retrieving personal information for privacy use cases. What is personal information?

Privacy 59

Privacy Education Insurance GDPR 59

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Identify and protect special category data When inventorying data, organizations should make a note of any especially sensitive data that requires extra protection. Irish regulators hit Meta with a EUR 1.2

GDPR 79

GDPR Compliance Personal data Privacy 79

ARMA International

NOVEMBER 15, 2019

iv] Further, “the practices of government [and other public and private institutions] become formal or official to the extent that they are documented.” [v] This article aims to consider what a documentary focus can offer to the practices and understandings of information governance.

Information governance 92

Information governance Government Libraries Paper 92

Krebs on Security

SEPTEMBER 14, 2022

. “That officially puts it into the ‘wormable’ category and earns it a CVSS rating of 9.8,” Childs said. Definitely test and deploy this update quickly.” “However, only systems with IPv6 enabled and IPSec configured are vulnerable.

Privacy 190

Privacy Security Authentication Cybersecurity 190

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. While the math remains the same, unique cryptographic keys generate unique ciphertext. Cryptographic keys can be random numbers, products of large prime numbers, points on an ellipse, or a password generated by a user.

Encryption 111

Encryption IT Passwords IoT 111

Hunton Privacy

OCTOBER 14, 2021

of the CPRA to clarify that the California Privacy Protection Agency (“CPPA”) must issue implementing CPRA regulations the later of either (1) July 1, 2021 or (2) within six months of the CPPA providing the California Attorney General with notice that it is prepared to assume rulemaking responsibilities under the CPRA.

Privacy 98

Privacy Insurance Security Data breaches 98

erwin

APRIL 21, 2020

Similarly, a data catalog enables businesses to create a seamless way for employees to access and consume data and business assets in an organized manner. The company measure sales down to a zip-code territory level across product categories. Give guidance to governments, health professionals and the public.

Government 97

Government Analytics Sales Privacy 97

erwin

APRIL 21, 2020

Think about the pandemic itself and the numerous global entities involved in identifying it, tracking its trajectory, and providing guidance to governments, healthcare systems and the general public. One example is the European Union (EU) Open Data Portal , which is used to document, catalog and govern EU data related to the pandemic.

Government 96

Government Analytics Sales Privacy 96

Hunton Privacy

JUNE 15, 2023

Below we outline some of the key changes introduced by the EP: Amendments to Key Definitions The EP introduced a number of meaningful changes to the definitions used in the AI Act (Article 3). Under the EP’s Position: The definition of “AI system” is aligned with the OECD’s definition of AI system.

Risk 55

Risk Artificial Intelligence Compliance GDPR 55

IT Governance

NOVEMBER 28, 2023

This week, we’re taking a slightly different approach with the ‘publicly disclosed data breaches and cyber attacks’ category, presenting the most interesting data points in a table format. The ‘enforcement’ and ‘other news’ categories remain unchanged. Only 3 definitely haven’t had data breached. Among those affected was SAP SE.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Data Matters

JULY 28, 2021

Polis urged Colorado’s General Assembly to “strike the appropriate balance between consumer protection while not stifling innovation and Colorado’s position as a top state to do business.”. Applicability and Definitions. After signing the CPA into law, Gov. ” Additionally, Gov. ” Additionally, Gov. Despite Gov.

Privacy 88

Privacy Sales Personal data Compliance 88

Data Matters

FEBRUARY 12, 2019

Against this backdrop, and with less than a year before the CCPA goes into effect on January 1, 2020, eyes are now increasingly turning to the California Attorney General (AG). The forums won’t likely provide definitive answers, they will likely provide some of the best information available. Definition of Unique Identifiers.

Sales 74

Sales Privacy Data Privacy Compliance 74

Data Protection Report

MARCH 16, 2022

The relevant portions of the law, titled the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“Act”) proposes reporting requirements for incidents, establishes new programs to curtail ransomware attacks and encourages information sharing between government agencies. New Government Programs. Reporting Requirements.

Ransomware 59

Ransomware FOIA Agriculture Cybersecurity 59

Data Protection Report

NOVEMBER 14, 2023

Finally, the SEC alleges that the Company had poor access controls, granting employees unnecessary “admin” rights and privileges to more systems than necessary for their work. 4 This statement was false, according to the SEC, because at this point, SolarWinds knew the risk was definitive, not merely hypothetical.

Cybersecurity 115

Cybersecurity IT Risk Passwords 115

Data Protection Report

JULY 3, 2019

individual contractors from the CCPA definition of “consumers.” Also, driver’s license data that is purchased from local government records databases would not be exempted from CCPA protections if it is used for a purpose that is not compatible with the purpose for which the data is maintained (e.g. AB 25:” employee exception”.

Access 40

Access Privacy Data Privacy Government 40

DLA Piper Privacy Matters

MAY 11, 2020

1, 2023, and move California privacy law a bit further in the direction of the EU General Data Protection Regulation. Create an operationally significant limited exception to deletion and access rights for many types of unstructured data. Amend the second threshold of the definition of a “business” to remove “devices.”

Privacy 52

Privacy Unstructured data Access Data collection 52

HL Chronicle of Data Protection

JANUARY 7, 2019

The California Attorney General Xavier Becerra and the California Department of Justice will hold six public forums about the California Consumer Privacy Act (CCPA) that are open to all members of the public. To facilitate and govern the submission of a request by a consumer to opt-out of the sale of personal information.

Data collection 40

Data collection Privacy Sales Government 40

HL Chronicle of Data Protection

FEBRUARY 4, 2019

Pursuant to section 1798.185(a) of the CCPA, the California Attorney General (AG) is obligated to solicit broad public participation and adopt regulations to further the purposes of the CCPA. To facilitate and govern the submission of a request by a consumer to opt-out of the sale of personal information.

Data collection 40

Data collection Sales Privacy Government 40

Data Matters

APRIL 10, 2020

On March 11, 2020, the California Attorney General (“AG”) released the third turn of proposed California Consumer Privacy Act (“CCPA”) regulations. Language from an earlier draft that prompted widespread use of granular charts to repeatedly reiterate information per category of personal information has not made a reappearance.

Privacy 68

Privacy Sales Insurance Compliance 68

Data Matters

OCTOBER 23, 2019

Businesses, consumer advocates, and privacy watchers have thus been eagerly waiting for over a year for the Attorney General to propose the regulations the CCPA requires him to promulgate. As laid out below, the nature and breadth of the Attorney General’s proposed regulations explain why they took so long to produce.

Sales 60

Sales Privacy Passwords Compliance 60

Data Matters

JANUARY 28, 2021

Indeed, the interim rules borrow several concepts and definitions from CFIUS’s recently amended regulations. The Secretary of Commerce will lead the review process in consultation with “appropriate agency heads,” including the Secretaries of Treasury, State, Defense, and Homeland Security, the Attorney General, the U.S. North Korea.

Communications 68

Communications Artificial Intelligence Risk Manufacturing 68

Thales Cloud Protection & Licensing

AUGUST 15, 2019

1, 2020, grants to the state’s over 40 million people a range of rights comparable to the rights given to European citizens with the General Data Protection Regulation (GDPR)–the two legislations are not that similar, but they do share some general features, GDPR is an omnibus law, while CCPA is more limited.

Privacy 92

Privacy GDPR Digital transformation Sales 92

Data Matters

JUNE 26, 2018

6 general election ballot. Many see the law as having echoes of the new European General Data Protection Regulation (GDPR) that went into effect on May 25. The CCPA also exempts data covered by Health Insurance Portability and Accountability Act and consumer report data governed by the Fair Credit Reporting Act. biometric data.

Privacy 60

Privacy GDPR Sales Data breaches 60

IT Governance

NOVEMBER 9, 2018

In addition to data subjects’ rights to be informed, of access, to rectification, to erasure, to restrict processing, to data portability and to object, the EU’s GDPR (General Data Protection Regulation) sets out requirements relating to automated individual decision-making, including profiling. appeared first on IT Governance Blog.

GDPR 88

GDPR Personal data Financial Services Compliance 88

DLA Piper Privacy Matters

DECEMBER 3, 2021

However, businesses that are not used to compliance with laws like the GDPR may find some of the new obligations challenging, for example, the PDPL introduces rights for individuals to access; rectify; correct; delete; restrict processing; request cessation of processing or transfer of data; and object to automated processing. Definitions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

Data Protection Report

JANUARY 6, 2020

The Court of Justice of the European Union (CJEU) will determine the validity of the EU Standard Contractual Clauses (SCCs) ( Data Protection Commissioner v Facebook Ireland Limited, Maximillan Schrems ) whilst the General Court of the EU will consider the future of Privacy Shield (La Quadrature du Net v Commission).

Privacy 85

Privacy GDPR Data breaches Risk 85

Hunton Privacy

JUNE 29, 2018

Definition of Personal Information. This definition of personal information aligns more closely with the EU General Data Protection Regulation’s definition of personal data. This definition of personal information aligns more closely with the EU General Data Protection Regulation’s definition of personal data.

Privacy 55

Privacy Sales Personal data Communications 55

erwin

APRIL 18, 2019

California Consumer Privacy Act (CCPA) compliance shares many of the same requirements in the European Unions’ General Data Protection Regulation (GDPR). Data governance , thankfully, provides a framework for compliance with either or both – in addition to other regulatory mandates your organization may be subject to.

GDPR 81

GDPR Compliance Privacy Personal data 81

ARMA International

SEPTEMBER 26, 2022

In sports, a playbook describes the “plays” a team executes to accomplish its goals and objectives—generally, winning a game or match. For example, a law firm’s records program must deal with client records, while a government agency’s may have to deal with Freedom of Information or open records-type requirements. What is a Playbook?

Records Management 116

Records Management e-Discovery IT Government 116

DLA Piper Privacy Matters

NOVEMBER 16, 2021

Notably it includes a host of new, onerous regulatory approval and governance requirements for personal data controllers, organisations processing “important data” and operators of online platforms/e-commerce sites, including in the context of corporate transactions. It is clear that this remains an enforcement priority.

Compliance 118

Compliance Personal data Security Risk 118

Data Protection Report

SEPTEMBER 17, 2019

Changes range from clarifications to definitions and new exemptions to technical corrections. Section (a)(2) is amended to permit the consumer to request that the business notifies a consumer of the categories of personal information sold for “each category of third party”, rather than “each third party.”

B2B 40

B2B Privacy Communications Encryption 40