IBM Big Data Hub

FEBRUARY 23, 2024

The only processing operations exempt from the GDPR are national security and law enforcement activities and purely personal uses of data. Identify and protect special category data When inventorying data, organizations should make a note of any especially sensitive data that requires extra protection.

GDPR 78

GDPR Compliance Personal data Privacy 78

IT Governance

NOVEMBER 28, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. This week, we’re taking a slightly different approach with the ‘publicly disclosed data breaches and cyber attacks’ category, presenting the most interesting data points in a table format.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

JULY 13, 2021

Welcome to our second quarterly review of security incidents for 2021, in which we take a closer look at the information gathered in our monthly list of cyber attacks and data breaches. In this blog, we provide an overview of the security landscape in the past three months, and look at key statistics and observations.

Data breaches 98

Data breaches Retail Ransomware Government 98

IT Governance

APRIL 12, 2023

Welcome to our first quarterly review of security incidents for 2023, in which we take a closer look at the information gathered in our monthly list of data breaches and cyber attacks. Overview IT Governance discovered 310 security incidents between January and March 2023, which accounted for 349,171,305 breached records.

Data breaches 59

Data breaches Ransomware Government Encryption 59

eSecurity Planet

FEBRUARY 14, 2023

I remember the first time we were asked for a SOC 2 report, which quickly became the minimum bar requirement in our industry for proof of an effective security program,” he said. The vision was to automate security and compliance across 14 frameworks, including SOC 2, ISO 27001, HIPAA and GDPR. Growth has definitely been robust.

Compliance 120

Compliance Security Cybersecurity Marketing 120

IT Governance

JULY 2, 2020

Second, organisations must implement security measures to protect personal data from being breached or misused, and they must disclose any security incidents involving this data. There is also a special category of personal data devoted to sensitive information. Data subject’s right to access.

GDPR 111

GDPR Personal data Data breaches Compliance 111

Data Protection Report

NOVEMBER 14, 2023

1 The SEC investigation began following SolarWinds’ widely reported 2020 breach, which was felt throughout the US economy. 1 The SEC investigation began following SolarWinds’ widely reported 2020 breach, which was felt throughout the US economy.

Cybersecurity 115

Cybersecurity IT Risk Passwords 115

DLA Piper Privacy Matters

DECEMBER 3, 2021

However, businesses that are not used to compliance with laws like the GDPR may find some of the new obligations challenging, for example, the PDPL introduces rights for individuals to access; rectify; correct; delete; restrict processing; request cessation of processing or transfer of data; and object to automated processing. Definitions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. 2 Common Types of Encryption The two main types of encryption categories are symmetric and asymmetric. and data transmission (Wi-Fi router algorithms, transport layer security [TLS], etc.);

Encryption 112

Encryption IT Passwords IoT 112

Data Protection Report

JANUARY 16, 2020

The Paper was released as part of an agenda for the upcoming Panel meeting which will be held on Monday, 20 th January 2020, and follows proposals by the Privacy Commissioner for Personal Data (the Commissioner ) to the government to amend the PDPO. Amendment to the definition of personal data. Certainty around data retention periods.

Paper 56

Paper Personal data Data breaches Privacy 56

Data Matters

AUGUST 5, 2019

On July 25, 2019, Governor Cuomo signed the two bills into law, one which amended the state’s data breach notification law, and another that created additional obligations for data breaches at credit reporting agencies. The Stop Hacks and Improve Electronic Data Security Act.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

DLA Piper Privacy Matters

MAY 11, 2020

Create an operationally significant limited exception to deletion and access rights for many types of unstructured data. Amend the second threshold of the definition of a “business” to remove “devices.” Right to correct inaccurate personal information. Enforcement and fines.

Privacy 52

Privacy Unstructured data Access Data collection 52

Data Protection Report

JULY 3, 2019

individual contractors from the CCPA definition of “consumers.” Note that the new exceptions would NOT apply to the private right of action for breaches. See below for a brief summary of the latest on “what’s cooking” in Sacramento. AB 25:” employee exception”. 3) This subdivision shall not apply to Section 1798.150. by a data broker).

Access 40

Access Privacy Data Privacy Government 40

Data Protection Report

JANUARY 16, 2020

The Paper was released as part of an agenda for the upcoming Panel meeting which will be held on Monday, 20 th January 2020, and follows proposals by the Privacy Commissioner for Personal Data (the Commissioner ) to the government to amend the PDPO. Amendment to the definition of personal data. Certainty around data retention periods.

Paper 40

Paper Personal data Data breaches Privacy 40

IT Governance

APRIL 25, 2023

Insider threats are one of the most difficult security challenges that organisations face. Preventing this from happening requires a nuanced approach to information security, and it’s one that organisations are increasingly struggling with. Insider threats fall into two categories: malicious or negligent.

Data breaches 105

Data breaches Phishing Personal data Access 105

eSecurity Planet

SEPTEMBER 23, 2022

Securities and Exchange Commission (SEC) strongly advised public companies to improve their cybersecurity. While the new security proposals have not yet become law, cybersecurity managers can begin to prepare metrics and audits that will not only help comply with those laws, but can also help create positive change now.

Cybersecurity 131

Cybersecurity Compliance Risk Communications 131

Data Protection Report

JANUARY 6, 2020

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. GDPR wasn’t the beginning and it’s definitely not the end. Conquer the world!

Privacy 85

Privacy GDPR Data breaches Risk 85

DLA Piper Privacy Matters

AUGUST 23, 2021

We have summarised the key compliance obligations under the PIPL below, with new obligations in bold for ease of reference: Relevant Laws/Regulations The PIPL becomes the primary, national-level law governing processing of personal information, but does not replace the existing data privacy framework.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

HL Chronicle of Data Protection

SEPTEMBER 25, 2019

AB-874 clarifies that deidentified and aggregate data are not within the definition of personal information. It also modifies the definition of personal information by adding the word “reasonably” in front of “capable of being associated with” in the definition of personal information. AB-874 (Edits to Personal Information).

Sales 40

Sales Communications Data breaches Compliance 40

Hunton Privacy

JUNE 29, 2018

Definition of Personal Information. This definition of personal information aligns more closely with the EU General Data Protection Regulation’s definition of personal data. This definition of personal information aligns more closely with the EU General Data Protection Regulation’s definition of personal data.

Privacy 55

Privacy Sales Personal data Communications 55

Thales Cloud Protection & Licensing

AUGUST 15, 2019

The CCPA uses a very broad definition of what constitutes as Personal Information (PI), defining PI as “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” 4) The right of Californians to access their PI.

Privacy 92

Privacy GDPR Digital transformation Sales 92

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA’s definition of “consumer” is equally broad. The CCPA governs how businesses treat “consumer” “personal information.”

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Data Protection Report

JANUARY 6, 2020

Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs. GDPR wasn’t the beginning and it’s definitely not the end. Conquer the world!

Privacy 52

Privacy GDPR Data breaches Risk 52

Data Protection Report

FEBRUARY 28, 2020

2562 (2019) ( PDPA ) was published on 27 May 2019 in Thailand’s Government Gazette and became effective the following day. Definition of Personal Data. Breach Notification. A data controller is required to notify the Office of any data breach affecting Personal Data within 72 hours after becoming aware of it. Background.

Personal data 93

Personal data Compliance Privacy Access 93

Data Protection Report

SEPTEMBER 17, 2019

Changes range from clarifications to definitions and new exemptions to technical corrections. Section (a)(2) is amended to permit the consumer to request that the business notifies a consumer of the categories of personal information sold for “each category of third party”, rather than “each third party.” Medical staff member.

B2B 40

B2B Privacy Communications Encryption 40

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA’s definition of “consumer” is equally broad. The CCPA governs how businesses treat “consumer” “personal information.”

Privacy 58

Privacy Sales Education Compliance 58

Data Matters

JUNE 29, 2018

AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected. The definition of personal information under AB 375 is expansive.

GDPR 79

GDPR Privacy Sales Data breaches 79

Data Protection Report

JUNE 29, 2018

It also requires a description of consumers’ rights and the categories of personal information the business has sold in the preceding 12 months. Consumer access and data portability rights. Expanded definition of “personal information.” Private actions. Private actions.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

It also requires a description of consumers’ rights and the categories of personal information the business has sold in the preceding 12 months. Consumer Access and Data Portability Rights. Expanded Definition of “Personal Information.” Private Actions. Private Actions.

Privacy 40

Privacy GDPR Personal data Risk 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The statute’s most direct reference to geography comes in the definition of “business” (the class of entities which are subject to most CCPA requirements), which requires that an entity subject to the law “does business” in California. 3. Definition of Personal Data/Information. and California personal jurisdiction jurisprudence.

GDPR 55

GDPR Privacy Personal data Sales 55

Data Matters

JUNE 29, 2018

AB 375 goes beyond the ballot initiative by adding requirements for businesses that collect personal information (as defined in the bill) from consumers to delete such information on request as well as to provide access to specific pieces of personal information collected. The definition of personal information under AB 375 is expansive.

GDPR 60

GDPR Privacy Sales Data breaches 60

HL Chronicle of Data Protection

OCTOBER 3, 2018

The statute’s most direct reference to geography comes in the definition of “business” (the class of entities which are subject to most CCPA requirements), which requires that an entity subject to the law “does business” in California. 3. Definition of Personal Data/Information. and California personal jurisdiction jurisprudence.

GDPR 40

GDPR Privacy Personal data Sales 40

HL Chronicle of Data Protection

OCTOBER 3, 2018

The statute’s most direct reference to geography comes in the definition of “business” (the class of entities which are subject to most CCPA requirements), which requires that an entity subject to the law “does business” in California. 3. Definition of Personal Data/Information. and California personal jurisdiction jurisprudence.

GDPR 40

GDPR Privacy Personal data Sales 40

Hunton Privacy

SEPTEMBER 1, 2018

Definition of “personal information” : The CCPA includes a number of enumerated examples of “personal information” (“PI”), including IP address, geolocation data and web browsing history. The bill modifies this requirement, stating that a business must disclose the right to deletion “in a form that is reasonably accessible to consumers.”

Privacy 49

Privacy Data collection Sales Data breaches 49

Data Protection Report

JUNE 6, 2019

Although the concept of providing consumers certain privacy rights is similar, the law has some significant differences from the CCPA, including the definition of “sale”. Unlike CCPA, the new law has no provisions relating to access or deletion or a private right of action relating to breaches.

Sales 40

Sales Privacy Insurance Manufacturing 40

eSecurity Planet

MARCH 17, 2023

Whether you’re operating a global enterprise network or a small family business, your network’s security needs to be optimized with tools, teams, and processes to protect customer data and valuable business assets. Also read: What is Network Security?

Security 119

Security Encryption Analytics Cloud 119

Hunton Privacy

MAY 18, 2011

On April 11, 2011, India adopted new privacy regulations, known as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “Rules”). Sensitive personal data may not be retained for longer than required for the purpose for which it may lawfully be used.

Privacy 40

Privacy Personal data Data collection Compliance 40