IT Governance

NOVEMBER 8, 2018

The EU GDPR (General Data Protection Regulation) and NIS Regulations (Network and Information Systems Regulations 2018) place an added emphasis on organisations’ ability to prevent data breaches and ensure that critical infrastructure remains operational in the event of disruption. Streamlining compliance.

GDPR 71

GDPR Cloud Compliance Data breaches 71

The Last Watchdog

JANUARY 28, 2024

However, over the past 20 years the practice of analyzing user data hasn’t advanced much beyond serving the business models of these tech giants. Rising data privacy regulations underscores the need for such a capability, Boyle told me. This, in turn, has led to rising data privacy regulations. That could be about to change.

Privacy 218

Privacy Data Privacy GDPR Personal data 218

Adam Levin

FEBRUARY 17, 2020

The California Consumer Privacy Act ( CCPA ) became law on January 1, 2020, and as was the case on the effective date of the General Data Protection Regulation (GDPR), the European Union’s similarly sweeping privacy legislation, it is being met with a general panic. Still others call it business as usual. What Is the CCPA?

Privacy 55

Privacy Compliance Personal data Sales 55

DLA Piper Privacy Matters

MAY 11, 2020

1, 2023, and move California privacy law a bit further in the direction of the EU General Data Protection Regulation. Some good news for CCPA-regulated ‘businesses’ The CPRA would: Limit businesses’ liability for violations of the law by “third-party” businesses. Enforcement and fines.

Privacy 52

Privacy Unstructured data Access Data collection 52

Data Breach Today

JULY 26, 2023

federal market regulators adopted rules Wednesday that require publicly traded companies to disclose most "material cybersecurity incidents" within four business days of determining materiality. Rules Approved in 3-2 Party Line Vote, Will Take Effect in December for Large Firms U.S.

Marketing 246

Marketing Cybersecurity 246

IT Governance

JULY 20, 2018

Although much of the focus in 2018 has been on ensuring compliance with the EU GDPR (General Data Protection Regulation) , another EU directive became UK law in May – the NIS Regulations (Network and Information Systems Regulations 2018). What are the NIS Regulations? Who does it apply to?

Compliance 67

Compliance GDPR Personal data Cloud 67

The Last Watchdog

APRIL 1, 2024

The technology and best practices for treating cybersecurity as a business enabler, instead of an onerous cost-center, have long been readily available. The report, titled “ Embed Cybersecurity And Privacy Everywhere To Secure Your Brand And Business ,” argues for a paradigm shift.

Cybersecurity 221

Cybersecurity Privacy B2B Risk 221

Data Breach Today

JULY 14, 2022

Latest Analysis of HHS OCR Health Data Breach Trends A little more than halfway into the year, hacking incidents, and especially ransomware incidents, as well as breaches involving business associates, are dominating the hundreds of major health data breaches affecting millions of individuals being reported to federal regulators.

Ransomware 292

Ransomware Data breaches 292

The Last Watchdog

APRIL 8, 2024

LW: What are fundamental steps CISOs can take to start to think and act strategically and communicate more effectively Pigueros: First, they need to understand the business including financials, customer concerns, product deficiencies and any macro level issues and how they are impacting the business.

Compliance 166

Compliance Cybersecurity Risk Mining 166

Data Breach Today

NOVEMBER 3, 2020

Final Fines Set Precedent, Avoid Court Cases, Likely Reflect EU Penalty Benchmarks Large, recently levied privacy fines against the likes of British Airways, H&M and Marriott show regulators continuing to bring the EU's General Data Protection Regulation to bear after businesses get breached.

Privacy 323

Privacy GDPR 323

Hunton Privacy

FEBRUARY 23, 2024

Organizations recognize the need to demonstrate AI accountability as a business imperative, especially as the expectations of consumers, business partners, shareholders and regulators around responsible AI use continue to grow. Tone from the top” is crucial for responsible AI programs.

Paper 118

Paper Government Risk Information Security 118

Data Breach Today

NOVEMBER 17, 2022

Video Streamer Pays 800,000 Euros to Settle Probe of Privacy and Security Practices The French data protection authority fined Discord 800,000 euros for privacy and security practices that violate the General Data Protection Regulation.

GDPR 240

GDPR Personal data Privacy Security 240

Hunton Privacy

AUGUST 29, 2023

On August 29, 2023, the California Privacy Protection Agency (“CPPA”) Board issued draft regulations on Risk Assessment and Cybersecurity Audit (the “Draft Regulations”). The CPPA Board will discuss the Draft Regulations during a public meeting on September 8, 2023.

Risk 114

Risk Cybersecurity Artificial Intelligence Privacy 114

The Last Watchdog

FEBRUARY 11, 2024

It seems every day we hear of another breach, another scam, another attack on anything from a small business to a critical aspect of our nation’s infrastructure. From identity theft to greater oversight on risk management, internal IT teams will be taking the brunt of these incoming regulations. The list goes on.

Risk 200

Risk IT Financial Services Cybersecurity 200

Data Protection Report

JANUARY 18, 2024

On January 3, 2024, the New York Department of Financial Services announced a consent order with GGT, where GGT agreed to pay NYDFS $8 million and to surrender its BitLicense (for cryptocurrency trading), due to alleged violations of NYDFS’ cybersecurity and its virtual currency regulations.

Cybersecurity 109

Cybersecurity Financial Services Compliance Encryption 109

Data Matters

SEPTEMBER 28, 2023

And, as their cyber risk skyrockets, the SEC has stepped in with new regulations, telling businesses what to disclose about these incidents — and requiring detailed disclosures on cyber risk management more broadly. The post SEC’s Cybersecurity Disclosure Rules Are Here.

Cybersecurity 166

Cybersecurity Compliance Risk Privacy 166

Data Protection Report

NOVEMBER 28, 2023

A Private Members’ Bill, the Artificial Intelligence (Regulation) Bill (the Bill ), has been introduced into House of Lords (the UK’s upper House of the UK Parliament) and is currently at the second Parliamentary stage. The establishment of an AI Authority by separate regulations. Criminal offences, penalties and fines.

Artificial Intelligence 122

Artificial Intelligence Risk Government Paper 122

Data Breach Today

JUNE 20, 2023

Delay Comes Amid Criticism of Rule Requiring 4-Day Disclosure of Material Incidents Federal market regulators delayed until October a decision on rules mandating private sector disclosure of cybersecurity incidents and cyber expertise on public boards.

Cybersecurity 143

Cybersecurity Marketing 143

The Last Watchdog

JANUARY 13, 2022

Commodity Futures Trading Commission (CFTC) fine against JPMorgan sent shockwaves through financial and other regulated customer-facing industries. Without a responsible business communication platform for these conversations to flow through, customer requests and discussions live only on employees’ personal devices.

Compliance 227

Compliance Customer Experience Communications Archiving 227

Data Breach Today

MARCH 24, 2023

House subcommittee got their first look at the Biden administration's new National Cybersecurity Strategy and quizzed the White House cybersecurity director on the timeline, proposed regulations and incentives for private businesses.

Cybersecurity 143

Cybersecurity 143

Hunton Privacy

NOVEMBER 27, 2023

On November 27, 2023, the California Privacy Protection Agency (“CPPA”) published its draft regulations on automated decisionmaking technology (“ADMT”). Under the proposed regulations, individuals also can exercise a right to access information about a business’s use of ADMT.

Privacy 121

Privacy Artificial Intelligence Access IT 121

Jamf

JANUARY 24, 2024

Learn about the basics of compliance in cybersecurity and why it is a crucial component of your organization’s security posture.

Compliance 105

Compliance Security Cybersecurity Risk 105

Hunton Privacy

MARCH 7, 2017

Sotto on the new cybersecurity regulations from the New York State Department of Financial Services (“NYDFS”). The NYDFS regulations will impose significant cybersecurity requirements on impacted businesses that will dictate how they plan for, respond to, and recover from data security events. Join Lisa J.

Cybersecurity 40

Cybersecurity Financial Services Privacy Security 40

National Archives Records Express

APRIL 25, 2024

While NARA recently published 36 CFR 1236 providing instructions to digitize paper records, this regulation should not be used to continue paper-based business processes. Agencies should review their business processes, specifically identifying those that still involve paper records.

Government 64

Government Computer and Electronics Paper Metadata 64

The Last Watchdog

JULY 13, 2023

The data shows how perceptions around cyber and technology risks, from ransomware and other cyber-attacks to the threats posed by AI, are changing the global business risk landscape. The economic impact of cybercrime on business across the globe continues to reach new levels, with the cost predicted to reach US$10.5

Risk 161

Risk Insurance Energy and Utilities Marketing 161

Krebs on Security

OCTOBER 1, 2020

The Federal Bureau of Investigation (FBI) and other law enforcement agencies have tried to discourage businesses hit by ransomware from paying their extortionists, noting that doing so only helps bankroll further attacks. But in practice, a fair number of victims find paying up is the fastest way to resume business as usual.

Ransomware 358

Ransomware Insurance Risk Government 358

DLA Piper Privacy Matters

AUGUST 8, 2023

Authors: Carolyn Bigg, Amanda Ge and Venus Cheung On July 24, 2023, the People’s Bank of China (“ PBOC ”) released the Measures for the Management of Data Security in the Business Areas Falling into PBOC’s Jurisdiction (Draft for Comment) (“ Draft Measures” ) for public consultation, which closes on August 24, 2023.

Financial Services 98

Financial Services Personal data Compliance Data collection 98

Security Affairs

APRIL 26, 2024

Emerging threats Cybercrime often exploits precisely the lack of regulation and centralized controls of cryptocurrencies to deceive investors and embezzle funds through various forms of phishing, investment scams, digital wallet theft, ransomware, and illegal mining.

Education 87

Education Mining Encryption Cybersecurity 87

Daymark

MARCH 12, 2024

Many companies are currently evaluating how they might fund initiatives necessary to move their businesses towards compliance with the Cybersecurity Maturity Model Certification (CMMC). When businesses suffer a cyberattack and cannot afford the cost to recover, they often go bankrupt. 5 Phases for Cybersecurity Compliance

Compliance 62

Compliance Cybersecurity GDPR Government 62

Security Affairs

MARCH 4, 2024

Consumer groups assert that Meta is not adhering to various rules established by the European privacy regulation GDPR: Fair Processing (Article 5(1)(a)): Personal data must be processed lawfully, fairly, and transparently. The European Consumer Organization strongly opposes Meta’s business model for data collection and processing.

Privacy 107

Privacy GDPR Personal data Data collection 107

AIIM

JULY 18, 2023

Governments around the world have started the arduous process of developing regulations and standards for artificial intelligence. Information management is not an insular profession and it's most successful in an organization when it's focused outward on the needs of stakeholders and business outcomes.

Artificial Intelligence 104

Artificial Intelligence Government IT 104

Thales Cloud Protection & Licensing

MARCH 24, 2024

Data Security Trends: 2024 Report Analysis madhav Mon, 03/25/2024 - 05:08 Amid ongoing economic uncertainty and a progressively complex threat landscape, businesses are trying to navigate increasingly stringent regulatory requirements while bolstering their security posture. Alarmingly, 16% admitted to hardly classifying any of their data.

Security 139

Security Artificial Intelligence IoT Compliance 139

KnowBe4

DECEMBER 5, 2023

organizations (and foreign entities doing business in the U.S.) that must follow SEC regulations. Security & Exchange Commission (SEC) announced several new cybersecurity rules , taking affect mid-December 2023, that will significantly impact all U.S.

Cybersecurity 94

Cybersecurity Security Ransomware 94

KnowBe4

FEBRUARY 9, 2024

of the 8-K, requires that all regulated companies report significant cybersecurity breaches within four business days of determining that the incident was “material”. Securities and Exchange Commission (SEC), through a new requirement of Item 1.05

Cybersecurity 75

Cybersecurity Security Ransomware 75

Dark Reading

OCTOBER 6, 2023

Try these steps to create an operational resilience action plan that will satisfy financial regulators and help sustain business without disruption.

95

95