Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

Data Matters

JULY 30, 2018

In October 2017, the National Association of Insurance Commissioners (NAIC) adopted an Insurance Data Security Model Law. On May 3, 2018, South Carolina became the first state to enact this Model Law, in the form of the South Carolina Insurance Data Security Act (H.B. See CT Gen Stat § 38a-999b (2015) ; 23 NYCRR 500.

Insurance 60

Insurance Security Cybersecurity Data breaches 60

Security Affairs

JANUARY 18, 2023

The discovered database was not protected by authentication. Researchers found about 435,000 payslips, 300 tax filings, 3,800 insurance payment documents, and 21,000 salary sheets belonging to various companies using the HR platform’s services. Pierluigi Paganini. SecurityAffairs – hacking, Myrocket). adrotate banner=”5″].

Privacy 89

Privacy Insurance Personal data Phishing 89

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. appeared first on Data Matters Privacy Blog.

Insurance 103

Insurance Security Cybersecurity Information Security 103

IT Governance

NOVEMBER 6, 2023

Compromised information included patients’ names, dates of birth, postal addresses, Social Security numbers, diagnosis and treatment information, and health insurance information. Compromised data included names, Social Security numbers, and health/medical insurance plan numbers.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

The Last Watchdog

AUGUST 1, 2019

That includes social security and social insurance numbers, bank account numbers, phone numbers, birth dates, email addresses and self-reported income; in short, just about everything on an identity thief’s wish list. Best security and privacy practices on everyone’s part is more imperative than ever. This was the Perfect Storm.

Data Privacy 198

Data Privacy Privacy Data breaches Cloud 198

Data Matters

SEPTEMBER 18, 2019

Under the revised Payment Services Directive (2015/2366) (PSD2), the European Banking Authority (EBA) and the European Commission were required to develop and adopt regulatory technical standards on strong customer authentication and common and secure open standards of communication. STRONG CUSTOMER AUTHENTICATION. What is SCA?

Authentication 102

Authentication e-Delivery Risk Sales 102

Hunton Privacy

JUNE 22, 2020

On July 1, 2020, amendments to Vermont’s data breach notification law, signed into law earlier this year, will take effect along with Vermont’s new student privacy law. Student Data Privacy. Security Breach Notice Act. The number of affected consumers exceeding 5,000 is no longer a basis for providing substitute notice.

Data breaches 107

Data breaches Privacy Education Data Privacy 107

Hunton Privacy

JULY 1, 2022

Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation. In addition to the monetary penalty of $5 million, NYDFS also accepted Carnival’s surrender of its insurance producer license; thus, Carnival has ceased selling insurance in New York.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Data Matters

FEBRUARY 25, 2021

The FCA is proposing amendments to: the UK onshored versions of EU technical standards on strong customer authentication (SCA) and common and secure methods of communication (UK SCA-RTS); its Approach Document on Payment Services and Electronic Money (Approach Document); and. Authentication code. its Perimeter Guidance Manual (PERG).

Authentication 68

Authentication Paper Risk Insurance 68

Data Matters

JANUARY 28, 2022

These recommendations are further detailed below, but two to note in particular: The Advisory recommends that organizations “require multi-factor authentication for all users, without exception.” Require multi-factor authentication (MFA) for all users. The post U.S.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Data Matters

DECEMBER 2, 2020

financial information, life/health insurance information, specified medical information, information leading to identification of a vulnerable adult, child, or young person who is the subject of an investigation or relating to court proceedings involving a child and young person, or.

Data Privacy 74

Data Privacy Privacy Data breaches Personal data 74

Data Matters

MARCH 12, 2019

Over the last few years, States have enacted increasingly aggressive legislation concerning data privacy and security, raising concerns that companies will be subject to a patchwork of different standards. Other Notable Changes. The proposed changes would amend the Rule to reflect this change.

Privacy 68

Privacy IT Information Security Insurance 68

DLA Piper Privacy Matters

MAY 5, 2020

Main takeaways from the EDBP guidelines are: Connected vehicles raise various privacy and data protection concerns, such as the lack of control and information asymmetry, the risk of excessive data collection; the risk of unlawful further processing of personal data; Most data associated with connected vehicles are considered as personal data (e.g.

Privacy 69

Privacy Personal data GDPR Insurance 69

Krebs on Security

JUNE 4, 2019

AMCA has advised LabCorp that Social Security Numbers and insurance identification information are not stored or maintained for LabCorp consumers.” We remain committed to our system’s security, data privacy, and the protection of personal information.” We have also advised law enforcement of this incident. ” ANALYSIS.

Insurance 251

Insurance Data Privacy Access Security 251

Data Matters

JUNE 11, 2019

On May 29, 2019, Nevada governor Steve Sisolak signed SB220 , a new bill that will amend the state’s existing online privacy notice statutes, NRS 603A.300 While several states have introduced CCPA-inspired bills, Nevada is the first state in which such a bill has become law.

Privacy 76

Privacy Sales Insurance Manufacturing 76

Security Affairs

MARCH 17, 2024

France Travail data breach impacted 43 Million people Scranton School District in Pennsylvania suffered a ransomware attack Lazarus APT group returned to Tornado Cash to launder stolen funds Moldovan citizen sentenced in connection with the E-Root cybercrime marketplace case UK Defence Secretary jet hit by an electronic warfare attack in Poland Cisco (..)

Data breaches 108

Data breaches Security Computer and Electronics Ransomware 108

The Last Watchdog

OCTOBER 26, 2021

With digital transformation leading to a boom in the use of digital certificates, our bedrock authentication and encryption framework is at an inflection point, where the demand and adoption of automation is set to rapidly accelerate to keep up with technology requirements. PKI touches nearly every aspect of our connected technologies.

Digital transformation 230

Digital transformation Compliance Encryption Authentication 230

Thales Cloud Protection & Licensing

MARCH 22, 2023

Banking, finance, and insurance institutions must safeguard consumer information and accounts while providing customers continuous access to their balances and funds. It delivers a robust digital experience that enables frictionless onboarding and offboarding of external identities while ensuring security, privacy, and compliance.

Customer Experience 71

Customer Experience Security Authentication Privacy 71

The Last Watchdog

AUGUST 19, 2021

The attacker claims to have compromised an end-of-lifed GPRS system that was exposed to the internet and was able to pivot from it to the internal network, where they were able to launch a brute force authentication attack against internal systems. Most immediately is the ubiquity of 2-factor authentication.

Data breaches 306

Data breaches Authentication Access Personal data 306

AIIM

OCTOBER 15, 2018

In North America, e-signatures are based on multiple authentication aspects with a focus on knowledge-based authentication which cannot be applied in EU due to much stricter privacy regulations. Helping organizations to go paperless with their signature processes in banking, insurance, telecommunication and other industries.

Compliance 109

Compliance Insurance Digital transformation Authentication 109

Hunton Privacy

NOVEMBER 20, 2013

On November 4, 2013, the China Insurance Regulatory Commission, which is the Chinese regulatory and administrative authority for the insurance sector, issued the Interim Measures for the Management of the Authenticity of Information of Life Insurance Customers (the “Measures”).

Insurance 40

Insurance Personal data Authentication Records Management 40

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Thales Cloud Protection & Licensing

NOVEMBER 15, 2023

Maintaining compliance Airports face increased pressure to comply with an increased patchwork of government and airport-specific regulations to ensure the security and privacy of their staff and passengers. Enforce, sustain, and prove compliance with increasing regulatory and cyber insurance requirements.

Cybersecurity 87

Cybersecurity Authentication Access Compliance 87

Thales Cloud Protection & Licensing

JANUARY 16, 2024

That includes banks, insurances, payment institutions, stock market, and many financial management firms (trading, crypt-assets, etc). What is the scope of DORA? As set out in its Article 2, DORA applies to the entire financial services sector.

Financial Services 83

Financial Services Cloud Cybersecurity Encryption 83

Data Protection Report

FEBRUARY 8, 2022

According to the settlement agreement, the AG concluded that EyeMed’s security practices did not meet the requirements of the SHIELD Act with respect to four requirements: authentication, password management, logging and monitoring, and data retention in the email account. In total, information for approximately 2.1

Passwords 98

Passwords Financial Services Authentication Insurance 98

Hunton Privacy

SEPTEMBER 19, 2016

The bill, known as the Personal Information and Privacy Protection Act , must now be approved by the New Jersey Assembly. to record, retain or transmit information by a covered entity governed by the medical privacy and security rules pursuant to the Health Insurance Portability and Accountability Act of 1996.

Privacy 45

Privacy Retail Personal data Insurance 45

Data Matters

FEBRUARY 6, 2019

The stolen information allegedly included names and identifying information, hashed passwords, security questions and answers, family information, Social Security numbers, lab results, health insurance information, doctor’s names, and medical conditions, among other things.

Data breaches 83

Data breaches Computer and Electronics Security Insurance 83

Data Matters

OCTOBER 24, 2019

Today we look at verification, children’s privacy and the non-discrimination provisions. In the summer of 2018, the California Legislature drafted and passed the California Consumer Privacy Act (CCPA) in record time. DETAILED ANALYSIS ON VERIFICATION, CHILDREN’S PRIVACY AND NON-DISCRIMINATION. INTRO AND BACKGROUND.

Privacy 60

Privacy Sales Passwords Authentication 60

IBM Big Data Hub

MAY 28, 2024

It supports the same security measures as data security but also covers authentication, data backup, data storage and achieving regulatory compliance, as in the European Union’s General Data Protection Regulation (GDPR). Data breach victims also frequently face steep regulatory fines or legal penalties.

Data breaches 82

Data breaches GDPR Compliance Encryption 82

Thales Cloud Protection & Licensing

JUNE 15, 2023

Sustained compliance: Encryption and effective key management are key requirements across all security and privacy regulations. C-suite executives: KMaaS can help C-suite executives to ensure that their organization's sensitive data and assets are secure and compliant with security and privacy regulations.

Encryption 133

Encryption Compliance Cloud Authentication 133

OpenText Information Management

MAY 10, 2024

Examples include names, mailing addresses, phone numbers, social insurance numbers, and credit card details. If PII is part of the model’s training dataset, it may generate responses to users, potentially leading to data breaches, privacy compromises, and violations of compliance regulations. This helps prioritize risk reduction.

Security 57

Security Artificial Intelligence Privacy Compliance 57

Thales Cloud Protection & Licensing

FEBRUARY 9, 2023

And for those that re-use passwords: theft of your entertainment login could be eventual access to bigger, more detrimental accounts (such as banking, insurance, and health). The security of 5G authentication and privacy will be called into question, and legacy broadcasting companies are susceptible to old OT/ new IT security conflicts.

Security 71

Security Authentication Phishing Access 71

Hunton Privacy

JULY 24, 2017

to record, retain or transmit information by a covered entity pursuant to the Health Insurance Portability and Accountability Act of 1996. to record, retain or transmit information by a covered entity pursuant to the Health Insurance Portability and Accountability Act of 1996.

Privacy 40

Privacy Retail Insurance Sales 40

Data Matters

DECEMBER 10, 2019

These controls include the following: Implement multifactor authentication: Multifactor authentication is widely lauded as the most effective control to detect and prevent unauthorized access. Data privacy issues: Cyberattacks often involve identity theft. standard login passwords). what a person has (e.g., biometrics).

Data breaches 60

Data breaches Insurance Authentication Risk 60

Data Matters

DECEMBER 10, 2019

These controls include the following: Implement multifactor authentication: Multifactor authentication is widely lauded as the most effective control to detect and prevent unauthorized access. Data privacy issues: Cyberattacks often involve identity theft. standard login passwords). what a person has (e.g., biometrics).

Data breaches 60

Data breaches Insurance Authentication Risk 60

Data Protection Report

OCTOBER 3, 2021

Effective October 1, 2021, an amendment [1] to the Connecticut General Statute concerning data privacy breaches, Section 36a-701b, will impact notification obligations in several significant ways.

Data breaches 142

Data breaches IT Insurance Passwords 142