Data Protector

JANUARY 29, 2017

And also, what standard of evidence is necessary to be generated, just in case privacy regulators exercise their Article 30(4) right to request it. The potential fine for not informing individuals, as their personal data is being collected, about retention periods is of course significant. I think not.

GDPR 136

GDPR Privacy Compliance Personal data 136

DLA Piper Privacy Matters

MARCH 30, 2023

In addition, as of 31 December 2022, the DPC has 15 cross-border decisions under Articles 60 and 65 at various stages from draft decision to investigation stage. Another key focus of the DPC was to continue engagement with data controllers on Article 37 GDPR compliance (designation and notification of a DPO).

Personal data 52

Personal data GDPR Compliance Financial Services 52

eSecurity Planet

AUGUST 22, 2023

Of course, any damage isn’t ideal, but at what point would the business be in trouble? A CRM at a large financial services company might have an RTO of 15 minutes, while a storage archive for cold data may have an RTO of 12-24 hours. This varies between organizations.

Data breaches 98

Data breaches Big data Cybersecurity Security 98

HL Chronicle of Data Protection

NOVEMBER 15, 2018

In the first, Article 71(1) states that EU data protection law will continue to apply to individuals that reside outside of the UK where their personal data was already being processed within the UK before the transition period ended. Lack of future flexibility granted to the UK.

GDPR 40

GDPR Personal data Government Financial Services 40

HL Chronicle of Data Protection

JULY 9, 2019

It offers the opportunity to receive access to free and professional expertise and support from the ICO on complying with the GDPR and UK Data Protection Act 2018 during the course of developing products and services. In the UK financial services industry, the Financial Conduct Authority (FCA) introduced a regulatory sandbox in 2015.

GDPR 40

GDPR Personal data Privacy Financial Services 40

KnowBe4

MARCH 28, 2023

According to a recent article in JD Supra, cyber insurers are either eliminating the coverage entirely or are "have quietly added policy language that, in essence, makes it incredibly challenging, and in some instances impossible, to secure any actual recovery for the claim." "Instead, the message goes directly to the hacker.

Phishing 86

Phishing Security awareness Insurance Cybersecurity 86

HL Chronicle of Data Protection

MAY 13, 2019

For example, the New York Department of Financial Services (‘NYDFS’) in March 2017 issued its Cybersecurity Regulation (23 NYCRR 500) (‘the NYDFS Cybersecurity Regulation’), a groundbreaking and far-reaching regulatory regime focused on financial institutions licensed in New York, including insurance companies.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40