Data Matters

FEBRUARY 2, 2021

The National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law has been adopted in at least 11 states, with several others (including New York) having implemented either older or similar laws or administrative guidance. appeared first on Data Matters Privacy Blog. See MCL § 500.555(9).).

Insurance 114

Insurance Security Compliance Cybersecurity 114

Data Matters

OCTOBER 20, 2022

Treasury Department is seeking public comment on the need and scope for a potential federal insurance response to catastrophic cyber incidents, akin to the one put in place for terrorism insurance after the attacks of September 11, 2001. The request, published by the Federal Insurance Office (FIO) in the U.S. Background.

Insurance 88

Insurance Marketing Cybersecurity Risk 88

Data Matters

OCTOBER 20, 2022

Treasury Department is seeking public comment on the need and scope for a potential federal insurance response to catastrophic cyber incidents, akin to the one put in place for terrorism insurance after the attacks of September 11, 2001. The post U.S.

Insurance 78

Insurance Privacy Data breaches Cybersecurity 78

The Last Watchdog

JANUARY 20, 2020

To help mitigate the risk of financial losses, more companies are turning to cyber insurance. Related: Bots attack business logic Cyber insurance, like other forms of business insurance, is a way for companies to transfer some of numerous potential liability hits associated specifically with IT infrastructure and IT activities.

Insurance 222

Insurance Data breaches Cybersecurity Risk 222

Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”.

Insurance 68

Insurance Security Cybersecurity Data breaches 68

Data Matters

APRIL 15, 2022

Utah has become the fourth state, following California, Virginia and Colorado, to enact a comprehensive consumer data privacy law. The Utah Consumer Privacy Act (“UCPA”), formerly known as Senate Bill 227, passed the Utah Senate and House with no opposition, and was signed by Governor Cox on March 24, 2022. Future Evolution of the Law.

Privacy 109

Privacy Personal data Sales Insurance 109

The Last Watchdog

JUNE 9, 2022

A criminal exploiting someone’s medical or insurance details to make fraudulent claims is known as medical identity theft. Because the scammer’s health records are linked to the victims’ information, it may not be easy to qualify for insurance in the future.

Privacy 274

Privacy Security Phishing Insurance 274

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

IT Governance

NOVEMBER 13, 2023

On 14 September, Mulkay discovered that the compromised files contained personal information, including “name, address, date of birth, Social Security number, driver’s license number or state ID, medical treatment information, and health insurance information”. Records breached: 79,582 Ontario hospitals update: information relating to 5.6

Data Privacy 85

Data Privacy Privacy Security Data breaches 85

IT Governance

NOVEMBER 6, 2023

Compromised information included patients’ names, dates of birth, postal addresses, Social Security numbers, diagnosis and treatment information, and health insurance information. As of the publication of this blog post, the Library’s website remains offline. Reading rooms remain open.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

IT Governance

OCTOBER 24, 2023

Welcome to a new series of weekly blog posts rounding up the biggest and most interesting news stories. American Family Insurance confirms cyberattack is behind IT outages Date of breach: 14 or 15 October 2023. Breached organisation: American Family Insurance, headquartered in Wisconsin, US.

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

Data Matters

JULY 30, 2018

In October 2017, the National Association of Insurance Commissioners (NAIC) adopted an Insurance Data Security Model Law. On May 3, 2018, South Carolina became the first state to enact this Model Law, in the form of the South Carolina Insurance Data Security Act (H.B. See CT Gen Stat § 38a-999b (2015) ; 23 NYCRR 500.

Insurance 60

Insurance Security Cybersecurity Data breaches 60

Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. appeared first on Data Matters Privacy Blog.

Insurance 103

Insurance Security Cybersecurity Information Security 103

IT Governance

JANUARY 9, 2024

million people was compromised, including names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, medical information, health insurance information, and billing and claims information. The post The Week in Cyber Security and Data Privacy: 1 – 7 January 2024 appeared first on IT Governance UK Blog.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Data Matters

FEBRUARY 20, 2019

On January 18, 2019, the New York State Department of Financial Services (NYDFS) issued Circular Letter 2019-1 (the Circular Letter), addressing insurers’ use of external consumer data and information sources in underwriting for life insurance. Unlawful Discrimination.

Insurance 68

Insurance Financial Services Compliance Retail 68

Hunton Privacy

OCTOBER 10, 2018

As reported on the Insurance Recovery Blog , Hunton Andrews Kurth insurance practice head Walter Andrews recently commented to the Global Data Review regarding the infirmities underlying an Orlando, Florida federal district court’s ruling that an insurer does not have to defend its insured for damage caused by a third-party data breach.

Insurance 57

Insurance Data breaches IT Cybersecurity 57

Data Matters

JUNE 22, 2022

Connecticut has passed a new state data privacy law slated to go into effect on July 1, 2023. Consistent with all of the state data privacy laws we have seen to date, the Connecticut law does not provide for a private right of action to broadly enforce the privacy rights provisions of the law.

Data Privacy 88

Data Privacy Privacy Personal data Sales 88

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Connecticut: An Act Concerning Data Privacy Breaches.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

The Last Watchdog

OCTOBER 5, 2023

Editor’s note: I recently had the chance to participate in a discussion about the overall state of privacy and cybersecurity with Erin Kapczynski, OneRep’s senior vice president of B2B marketing. OneRep provides a consumer service that scrubs your personal information from Google and dozens of privacy-breaching websites.

Cybersecurity 203

Cybersecurity Privacy Cloud IoT 203

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Cross-Border Data Privacy and Security Concerns in the Dawn of Quantum Computing. Traditionally, privacy has taken the form of a policy document created, housed, and referenced by the offices of general counsel and compliance at most organizations. Data privacy is not a check-the-box compliance or security item. In the Dec.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

Data Matters

DECEMBER 15, 2020

HHS stated that the Proposed Rule is intended to reduce burdens that may limit or discourage care coordination and case management communications among individuals and HIPAA-covered entities while continuing to protect the privacy of individuals. Notice of Privacy Practices Changes. Identity Verification.

Privacy 68

Privacy Access Insurance Communications 68

Data Matters

SEPTEMBER 7, 2022

The National Association of Insurance Commissioners (NAIC) held its Summer 2022 National Meeting (Summer Meeting) August 9–13, 2022. 1. NAIC to Develop New Privacy Model Law. This post summarizes the highlights from this meeting in addition to interim meetings held in lieu of taking place during the Summer Meeting.

Insurance 78

Insurance Paper Privacy Risk 78

IT Governance

FEBRUARY 21, 2024

Welfare Benefits Plan Source 1 ; source 2 New Healthcare USA Yes 13,079 Insurance ACE/Humana Inc. Subscribe now The post The Week in Cyber Security and Data Privacy: 12 – 18 February 2024 appeared first on IT Governance UK Blog. Source New Manufacturing USA Yes 20,415 TECA Srl Source New Transport Italy Yes 16.7

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Data Matters

AUGUST 17, 2023

law enforcement, immigration, employment, insurance and health), and so have a greater impact across society – including in relation to vulnerable groups. The post UK ICO Scrutinizes Use of Generative AI appeared first on Data Matters Privacy Blog.

Insurance 78

Insurance Communications Risk Privacy 78

IT Governance

NOVEMBER 20, 2023

Read more in our Catches of the Month blog. Read more in our Catches of the Month blog. Rackspace ransomware recovery has cost $11 million so far Rackspace has told the SEC that recovering from a ransomware attack last December has cost it $11 million in remediation so far – although half of that amount has been covered by insurance.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

Data Matters

NOVEMBER 19, 2018

The Administration is preparing to release a Request for Information (“RFI”) on potential modifications to Health Insurance Portability and Accountability Act (HIPAA) rules. The post Proposed Changes to Federal Health Privacy Regulations Now at OMB for Review appeared first on Data Matters Privacy Blog.

Privacy 68

Privacy Insurance IT 68

IT Governance

DECEMBER 14, 2021

Organisations such as IT Governance that offer cyber security as a service assign dedicated experts to oversee the organisation’s data protection and data privacy needs. In this blog, we look at three other ways that cyber security as a service can benefit your organisation, and help you understand how the process works. Get started.

Security 131

Security Insurance Data breaches Information Security 131

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. Subscribe now The post The Week in Cyber Security and Data Privacy: 5 – 11 February 2024 appeared first on IT Governance UK Blog.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Data Matters

FEBRUARY 25, 2022

Join us from February 28 – March 3 for DPFS Week 2022 , a series of webinars looking at the impacts of data privacy across the financial sector. Hear from industry speakers on: How the latest privacy and cybersecurity developments in Europe and the U.S. Caroline Louveaux, Chief Privacy Officer, Mastercard.

Financial Services 103

Financial Services Privacy Data Privacy Cybersecurity 103

IT Governance

AUGUST 3, 2020

You can find our full list of publicly disclosed data breaches from July in this blog. Meanwhile, you can stay up to date with the latest news by subscribing to our Weekly Round-up or visiting our blog. Canadian insurer Heartland Farm Mutual says an employee’s email account breached (unknown). Cyber attacks. In other news….

Data breaches 141

Data breaches Insurance Ransomware Personal data 141

Data Matters

MAY 2, 2019

The Washington Privacy Act, SB 5376/HB1854, failed to make its way through the legislative process. Reuven Carlyle, called the game on April 17, tweeting that despite the “unprecedented 46-1 vote” in the Senate, “[u]nfortunately, House failed to pass privacy legislation this year. The Bill’s sponsor, Sen.

Data breaches 68

Data breaches Privacy Passwords Military 68

Data Matters

DECEMBER 2, 2020

financial information, life/health insurance information, specified medical information, information leading to identification of a vulnerable adult, child, or young person who is the subject of an investigation or relating to court proceedings involving a child and young person, or.

Data Privacy 74

Data Privacy Privacy Data breaches Personal data 74

The Last Watchdog

OCTOBER 29, 2018

the Health Insurance Portability and Accountability Act (HIPAA)), the answer is generally that a company should implement a “reasonable data privacy and security program” under all circumstances. Companies should have written data privacy and security policies and procedures in place. Insurability. Reasonable protections.

Security 164

Security Data Privacy Privacy Data breaches 164

IT Governance

NOVEMBER 28, 2023

The post The Week in Cyber Security and Data Privacy: 20 – 26 November 2023 appeared first on IT Governance UK Blog. In the meantime, if you missed it, check out last week’s round-up. Please do also let us know what you think about our new table format.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52