Data Matters

MAY 14, 2019

William Long, partner and global co-leader of at Sidley’s Privacy and Cybersecurity practice, and has been working on global data privacy and information security matters for a number of years. Read the Full Interview.

Financial Services 68

Financial Services GDPR Big data Data Privacy 68

Data Matters

MARCH 12, 2019

Over the last few years, States have enacted increasingly aggressive legislation concerning data privacy and security, raising concerns that companies will be subject to a patchwork of different standards. Aligning the Safeguards Rule with State Regimes.

Privacy 68

Privacy IT Information Security Insurance 68

Thales Cloud Protection & Licensing

JANUARY 10, 2024

Navigating the EU-US Data Protection Framework sparsh Thu, 01/11/2024 - 05:26 On 10 July 2023, the European Commission adopted a new adequacy decision regarding the Data Privacy Framework (“DPF”). This follows the invalidation of the EU-US Privacy Shield, by the Court of Justice of the European Union on 16 July 2020.

Data Privacy 83

Data Privacy Personal data Privacy Cloud 83

Data Matters

JANUARY 28, 2022

Other government agencies, like the New York Department of Financial Services and the Federal Trade Commission, are also increasingly focused on the need for broad implementation of MFA. Like an incident response plan, MFA has become a critical element of cybersecurity programs. The post U.S.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Hunton Privacy

NOVEMBER 8, 2023

On November 1, 2023, New York Governor Hochul announced that the New York State Department of Financial Services (“NYDFS”) amended its Cybersecurity Regulation applicable to covered financial institutions. Our previous blog post covered key proposed changes to the Cyber Regulation.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

Data Matters

JANUARY 2, 2018

This past year was marked by ever more significant data breaches, growing cybersecurity regulatory requirements at the state and federal levels and continued challenges in harmonizing international privacy and cybersecurity regulations. As we begin this New Year, here is list of the top 10 privacy and cybersecurity issues for 2018: EU GDPR.

Cybersecurity 68

Cybersecurity Privacy Data breaches GDPR 68

Data Matters

AUGUST 17, 2021

The Guidance is not intended to serve as a comprehensive framework but rather provides financial institutions with examples of effective risk management practices without endorsing any specific information security framework or standard. 1 The Federal Financial Institutions Examination Council is a U.S.

Authentication 88

Authentication Access Risk Financial Services 88

Data Matters

JUNE 24, 2021

In the Order, the SEC alleges that First American’s disclosures concerning the vulnerability were deficient because senior executives were not provided all available and relevant information, specifically that First American’s information security personnel had identified and failed to remediate the vulnerability months earlier in January 2019.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

IBM Big Data Hub

JANUARY 10, 2024

IBM is further adding additional zero trust principles designed to increase security and ease of use with the IBM Hyper Protect Platform. This unique capability is designed for workloads that have strong data sovereignty, regulatory or data privacy requirements.

Security 72

Security Cloud Data Privacy Financial Services 72

Data Matters

APRIL 20, 2021

DOL guidance provides a series of questions that should serve as a starting point for this review and includes topics such as the service provider’s information security standards, track record, cybersecurity insurance coverage, and cybersecurity validation techniques.

Cybersecurity 68

Cybersecurity Insurance Risk Compliance 68

Data Matters

NOVEMBER 13, 2017

Furthermore, sharing login credentials with third parties raises significant issues of consumer privacy, choice and transparency. They may also demonstrate the CFPB’s expectations of market participants and its broader viewpoints about consumer privacy and consent. Security practices should be adapted to new risks and threats.

Financial Services 60

Financial Services Privacy Access Marketing 60

Data Matters

DECEMBER 7, 2017

The Report, titled A Financial System That Creates Economic Opportunities: Asset Management and Insurance , identifies laws and regulations that are inconsistent with the Trump Administration’s Core Principles for financial regulation as set forth in Executive Order 13772 (Feb. 3, 2017), and makes recommendations to ensure alignment.

Insurance 60

Insurance Data breaches Security Cybersecurity 60

Data Matters

APRIL 21, 2020

The Cybersecurity Information Sharing Act of 2015 permits nonfederal entities to share cyber threat indicators and defensive measures with federal and nonfederal entities and provides some limited liability shields from privacy claims where entities share information pursuant to certain protocols. 510.701 (2020). The post U.S.

Cybersecurity 68

Cybersecurity Risk Ransomware Government 68

Data Matters

AUGUST 5, 2019

Together, the new laws require the implementation of reasonable data security safeguards, expand breach reporting obligations for certain types of information, and require that a “consumer credit reporting agency” that suffers a data breach provide five years of identity theft prevention services for impacted residents.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Data Protection Report

JANUARY 7, 2019

The two-year transitional period under the New York State Department of Financial Services (“DFS””) Cybersecurity Regulation , 23 NYCRR 500 (the “Regulation”), will expire on March 1, 2019, with the final remaining requirement becoming effective. February 15 deadline looms for first DFS Cybersecurity Certification.

Cybersecurity 40

Cybersecurity Compliance Financial Services Risk 40

Data Matters

FEBRUARY 28, 2019

The post FCA Publishes Wholesale Banks and Asset Management Cyber Multi-Firm Review Findings appeared first on Data Matters Privacy Blog. For one, many had defined the threat landscape too narrowly. A full copy of the FCA report can be found here.

Cybersecurity 68

Cybersecurity Risk Marketing Financial Services 68

Data Matters

JANUARY 25, 2018

United Shore Financial Services, LLC , the plaintiff filed a putative class action against United Shore Financial Services (United Shore) and Xerox Mortgage Services, Inc. XMS) over alleged intrusions into XMS’s systems on which United Shore had stored potential borrowers’ personal information.

Data breaches 60

Data breaches Communications Financial Services Privacy 60

Data Matters

OCTOBER 8, 2020

financial institutions or firms that perform “critical financial services.”. 2 Citing the Federal Bureau of Investigation (FBI), OFAC reports that between 2018 and 2019, there was a 37% increase in reported ransomware cases with a 147% increase in ransomware-related financial losses. 1, 2020, [link].

Ransomware 68

Ransomware Compliance Risk Government 68

Data Matters

APRIL 23, 2018

Information security is not yet a science; outside of the handful of issues falling under the field of cryptography, there is no formalized system of classification. The most prepared cybersecurity programs of today will not attempt to implement a static, “out-of-the-box” solution to cyber risk.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60

Data Matters

FEBRUARY 25, 2021

Brexit triggered a significant onshoring of legislation to ensure that the UK continued to have a functioning financial services regulatory regime. The post UK FCA Consults on Changes to Strong Consumer Authentication, Dedicated Interfaces, and Guidance on Payment Services appeared first on Data Matters Privacy Blog.

Authentication 68

Authentication Paper Risk Insurance 68

Thales Cloud Protection & Licensing

DECEMBER 23, 2019

Banking, financial services, media, insurance, and e-commerce companies have the lead in transformational initiatives in India. While digital transformation is driving benefits to companies and their customers alike, it also introduces new challenges for information security professionals.

Digital transformation 15

Digital transformation Cloud Encryption Data Privacy 15

Hunton Privacy

OCTOBER 17, 2012

For instance, health care regulatory authorities may decide to enact their own industry-specific regulation requiring that personal health information be subject to additional safeguards and treated as “sensitive personal information.” In addition, the bill does not impose a generally applicable data breach notification requirement.

Personal data 45

Personal data Financial Services Data Privacy Data breaches 45