Data Breach Today

OCTOBER 15, 2019

What's the purpose of ISO 27701, the new privacy extension to the ISO 27001 information security management standard? Matthieu Grall, CISO and DPO at SodiFrance, a French IT services company, who participated in development of 27701, explains the standard and discusses "privacy by design" compliance issues.

Privacy 134

Privacy Compliance Information Security Security 134

Data Breach Today

APRIL 24, 2020

The latest edition of the ISMG Security Report analyzes the privacy issues raised by COVID-10 contact-tracing apps. Also featured: An update on efforts to fight fraud tied to economic stimulus payments; John Kindervag on the origins of "zero trust."

Privacy 147

Privacy Security 147

Data Breach Today

NOVEMBER 12, 2019

Massive Research Project With Ascension Health System Raises Concerns A newly disclosed collaboration between Google and the massive Ascension healthcare system that the partners say is designed to improve patient care is raising serious privacy concerns.

Privacy 179

Privacy Access IT 179

Data Breach Today

NOVEMBER 8, 2019

The latest edition of the ISMG Security Report offers an analysis of how Twitter allegedly was used to spy on critics of the Saudi Arabian government. Also featured: A preview of the new NIST Privacy Framework and an update on business email compromise attacks.

Privacy 168

Privacy Government Security 168

Schneier on Security

MARCH 15, 2021

Security and Privacy of Apple’s Crowd-Sourced Bluetooth Location Tracking System “: Abstract: Overnight, Apple has turned its hundreds-of-million-device ecosystem into the world’s largest crowd-sourced location tracking network called offline finding (OF). Interesting research: “ Who Can Find My Devices?

Security 140

Security Paper Privacy Access 140

Data Breach Today

OCTOBER 19, 2018

The latest edition of the ISMG Security Report features an analysis of the results of over 1,000 cyberattack investigations in the U.K. Also: an update on the proposed NIST privacy framework and a report on voter registration information for sale on the dark web.

Sales 163

Sales Privacy Security 163

Data Breach Today

DECEMBER 6, 2019

The latest edition of the ISMG Security Report offers an analysis of the FBI's security and privacy warnings about smart TVs. Also featured: discussions on the security of connected medical devices and strategies for fighting synthetic identity fraud.

Risk 113

Risk Privacy Security 113

Data Breach Today

FEBRUARY 22, 2024

Million Civil Penalty to Settle Privacy Investigation This week: more fallout from LockBit, Avast to pay $16.5M, Russia-linked group targeted mail servers, no indication that AT&T was hacked, analysis of a patched Apple flaw, Microsoft enhanced logging, an Android banking Trojan, North Korean hackers and a baking giant fell to ransomware.

Ransomware 262

Ransomware Privacy 262

Data Breach Today

FEBRUARY 14, 2020

Also featured: Advice on implementing NIST's new privacy framework; lessons learned in a breach disclosure. The latest edition of the ISMG Security Report analyzes the indictments of four Chinese military officers in connection with the 2017 Equifax data breach.

Military 223

Military Data breaches Privacy Security 223

Data Breach Today

JULY 13, 2018

The latest edition of the ISMG Security Report features a discussion of California's groundbreaking new privacy law as well as an update on the potential impact of the hacker group responsible for the Ticketmaster breach.

Privacy 100

Privacy Security 100

Data Breach Today

JANUARY 16, 2019

Privacy attorney Adam Greene provides tips for avoiding mistakes when conducting a HIPAA security risk analysis and spells out the essential steps to take.

Risk 134

Risk Security Privacy 134

Data Breach Today

MAY 8, 2020

Also featured: A discussion of emerging privacy issues and a report on why account takeover fraud losses are growing. The latest edition of the ISMG Security Report analyzes the many challenges involved in developing and implementing contact-tracing apps to help in the battle against COVID-19.

Privacy 185

Privacy Security 185

Data Breach Today

JULY 12, 2019

Also featured are discussions of California's privacy law as a model for other states and the next generation of deception technologies. The latest edition of the ISMG Security Report analyzes the significance of fines against British Airways and Marriott for violations of the EU's GDPR.

GDPR 251

GDPR Privacy Security 251

Data Breach Today

OCTOBER 5, 2018

Although the passage by Congress of the Support for Patients and Communities Act this week is an important step in the nation's battle against the opioid drug addiction crisis, it lacks a critical privacy provision, says Geisinger Health CIO John Kravitz, who analyzes the implications.

Privacy 111

Privacy IT 111

Data Breach Today

OCTOBER 23, 2020

Also featured: A discussion of nation-state adversaries and how they operate; an update on Instagram privacy investigation. The latest edition of the ISMG Security Report analyzes the U.S. indictment against Russian hackers who were allegedly behind NotPetya.

Privacy 162

Privacy Security 162

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. GDPR-style data privacy laws came to the U.S. with the California Consumer Privacy Act (CCPA) effective Jan.

Data Privacy 138

Data Privacy Compliance Privacy Security 138

Data Protection Report

MARCH 25, 2024

Dealing with cert pinning and root detection The privacy area has been white-hot lately, including litigation and investigations involving VPPA; Wiretap/Pen Register/Trap and Trace; and Opt Out Compliance. Root detection, meanwhile, can frustrate traffic analysis on Android because a rooted Android device is often used to conduct such tests.

Privacy 44

Privacy Compliance Communications Data collection 44

Data Breach Today

NOVEMBER 26, 2019

Three Key Areas That Need Clarification With the California Consumer Privacy Act set to go into effect Jan. 1, 2020, companies are making last-minute compliance preparations. But these preparations are challenging because regulations to carry out the law are still pending and ambiguities remain. Here's a look at three issues.

Compliance 160

Compliance Privacy 160

AIIM

JANUARY 21, 2021

EU Privacy Shield framework, has created a wave of uncertainty for the legal industry. For the last five years, Privacy Shield has been central to alleviating that burden. The years since Schrems I have brought significant changes to how data privacy is viewed on the global stage. Ever since the U.S.-EU

Privacy 159

Privacy Data Privacy GDPR Risk 159

Data Breach Today

AUGUST 16, 2019

Transport Agency Criticized for Violating Privacy Law Big data analysis relies on big data being available. But a recent incident in Australia put the privacy of millions of public transport travelers at risk after steps weren't taken to properly anonymize three years of travel records, Victoria's information commissioner has found.

Privacy 134

Privacy Risk Big data 134

Data Breach Today

JUNE 5, 2020

Also featured: how security concerns are holding back IoT projects and the privacy issues raised by recording videoconferences. The latest edition of the ISMG Security Report sizes up progress made so far on identity management and the work yet to be done.

IoT 162

IoT Privacy Security 162

Hunton Privacy

NOVEMBER 15, 2023

The Australian legislature increased maximum penalties for ‘serious’ contraventions of the Privacy Act with effect from December 2022 to at least A$50 million. If made out, this would be a breach of Australian Privacy Principle 11.1. However, the maximum penalty available in this case will be A$2.2

Data breaches 128

Data breaches Privacy Risk Information Security 128

Data Breach Today

MARCH 16, 2018

Privacy attorney Kirk Nahra offers an analysis of the New York state attorney general proposing updates to the state's data security laws and issuing a substantial financial penalty in a HIPAA violations case.

Privacy 100

Privacy Security 100

IBM Big Data Hub

NOVEMBER 29, 2023

Sharing and monetizing a high-quality, privacy-protected synthetic replica with internal stakeholders or external business partners. That said, synthesizing data offers more protection against traditional data privacy and data anonymization techniques (think of masking), while also doing a better job of preserving the data’s utility.

Privacy 88

Privacy Data Privacy Artificial Intelligence Risk 88

Data Breach Today

JUNE 7, 2019

The latest edition of the ISMG Security Report describes Apple's newly announced single sign-on function that's built with privacy in mind. Plus, a discussion of the "other" insider threat and an Infosecurity Europe conference recap.

Privacy 168

Privacy Security 168

Data Breach Today

DECEMBER 3, 2019

Getting the proper vendor contracts completed is a top concern for organizations preparing to comply with the California Consumer Privacy Act, says Caitlin Fennessy, research director at the International Association of Privacy Professionals.

Privacy 113

Privacy 113

Data Protection Report

OCTOBER 5, 2023

With most provisions of the Act to modernize legislative provisions as regards the protection of personal information (Act 25) having just come into effect on September 22, public bodies and enterprises (organizations) will now need to conduct privacy impact assessments (PIA) during various projects that involve personal information.

Privacy 57

Privacy IT Data Privacy 57

Data Breach Today

MAY 19, 2021

Niloo Howe and David Cole on the Impact of Pandemic and Protests on Privacy The COVID-19 pandemic created unique conditions for technology and surveillance practices to erode global privacy. In this discussion of their RSA Conference keynote, Niloo Howe and David Cole share their research, case studies and analysis.

Privacy 284

Privacy 284

Data Breach Today

SEPTEMBER 4, 2020

What privacy and security issues are raised by patients using smartphone apps to access health records? Attorney Helen Oscislawski and security expert Jarrett Kolthoff offer an analysis.

Risk 352

Risk Privacy Access Security 352

Data Breach Today

MARCH 26, 2020

healthcare community battles the COVID-19 outbreak, says privacy attorney Kirk Nahra of the law firm WilmerHale. Recent HIPAA-related moves by federal regulators aim to improve information sharing and care coordination as the U.S. But some of the provisions could cause confusion, he notes.

Privacy 147

Privacy 147

Hunton Privacy

OCTOBER 12, 2021

On October 1, 2021, Florida’s Protecting DNA Privacy Act (the “Act”), took effect. The Act, signed into law by Governor Ron DeSantis on June 29, restricts certain willful collection, retention, analysis and disclosure of the DNA samples or DNA analysis results of persons in Florida without their express consent.

Privacy 81

Privacy Compliance Sales IT 81

Data Protection Report

JUNE 21, 2023

The notice must be posted in the same location and in the same manner as the privacy notice. “If Similar to the other states listed above, the new Texas law has specific requirements relating to the privacy notice and the written contracts with processors.

Privacy 83

Privacy Personal data Sales Retail 83

Data Protection Report

MAY 18, 2022

On May 16, 2022, the Office of the Privacy Commissioner of Canada (the “OPC”) released an Interpretation Bulletin (the “Bulletin”) on what it considers to be “sensitive” personal information under the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”).

Privacy 125

Privacy Insurance Phishing Risk 125

Data Breach Today

AUGUST 10, 2018

An analysis of the privacy issues Amazon will face as it dives deeper into the healthcare business leads the latest edition of the ISMG Security Report. Also featured: A preview of ISMG's Security Summit in New York Aug.

Privacy 100

Privacy Security IT 100

The Texas Record

MAY 18, 2023

One way to ensure that these vital programs thrive is to conduct a SWOT analysis. A SWOT analysis is a strategic management tool that can be used solo or prior to conducting a TOWS metric (which we will discuss briefly in this article). A SWOT analysis analyzes the strengths, weaknesses, opportunities, and threats of a program.

Records Management 40

Records Management Risk Access File names 40

Security Affairs

FEBRUARY 12, 2021

Summary: While understanding the implementation of various security and privacy measures in Telegram, I identified that telegram fails again in terms of handling the users data. SecurityAffairs – hacking, privacy). The post The “P” in Telegram stands for Privacy appeared first on Security Affairs.

Privacy 115

Privacy Security Information Security IT 115

Threatpost

MARCH 23, 2021

TikTok’s source code is in line with industry standards, security researchers say.

Privacy 105

Privacy Security Cloud 105