eSecurity Planet

DECEMBER 7, 2022

Despite all this, there is one tech category that has held up fairly well: Cybersecurity. One of the firm’s investments in this category is Immuta. Immuta’s technology helps with secure data in the cloud at a granular level and allows for enforcing data security policies. One of his bets in the category is Piiano.

Cybersecurity 145

Cybersecurity Compliance Risk Ransomware 145

Security Affairs

MARCH 1, 2024

The Düsseldorf Police announced that a large-scale international law enforcement operation led to the seizure of the largest German-speaking cybercrime marketplace. “Based on the usual structure of legal digital marketplaces, narcotics, criminal services, but also detailed instructions on serious crimes were sold in various categories.

Access 116

Access IT Information Security Security 116

Hunton Privacy

APRIL 18, 2023

Enforcement SB 5 does not contain a private right of action and would be enforced exclusively by the Indiana Attorney General.

Privacy 132

Privacy Personal data Sales Insurance 132

Hunton Privacy

SEPTEMBER 24, 2021

The CPPA was established by the CPRA , which vested the Agency with full administrative power, authority and jurisdiction to implement and enforce the CCPA. The Agency’s responsibilities include updating existing regulations and adopting new regulations.

Privacy 116

Privacy Risk Cybersecurity Security 116

Hunton Privacy

MAY 18, 2023

On May 17, 2023, the European Data Protection Board (EDPB) adopted the final version of its Guidelines on facial recognition technologies in the area of law enforcement (the “Guidelines”).

Compliance 58

Compliance Risk Access IT 58

Hunton Privacy

AUGUST 2, 2021

Kathy Castor (D-Florida), a member of the House Energy and Commerce Committee, reintroduced the Protecting the Information of our Vulnerable Children and Youth Act (the “Bill”).

Privacy 125

Privacy Education Access Security 125

Data Matters

SEPTEMBER 6, 2022

News of the first public enforcement action was accompanied by OAG guidance highlighting enforcement priorities around the Global Privacy Control, loyalty programs and financial incentives, and privacy policies that are both easy to read and functional. State of California vs. Sephora – First CCPA Enforcement Action and Fine.

Privacy 197

Privacy B2B Sales Compliance 197

DLA Piper Privacy Matters

AUGUST 19, 2021

On 17 December 2019, the ICO issued the first administrative fine under the GDPR (known as a monetary penalty notice in the UK), alongside an Enforcement Notice, against Doorstep Disparensee Limited (“ DDL ”). Some of these contained personal data and special category (health) data.

GDPR 105

GDPR Personal data Compliance Risk 105

Thales Cloud Protection & Licensing

FEBRUARY 22, 2022

Regulatory requirements – Whether an organization is headquartered in the US, in the EU or in any other part of the world, privacy and security laws, regulations and standards mandate the enforcement of appropriate controls to secure personal data and critical infrastructure. Thales CV1000 Network Encryptor, in the category Network Security.

Cybersecurity 71

Cybersecurity Cloud Encryption Authentication 71

Hunton Privacy

JULY 20, 2023

Enforcement The DPDPA does not contain a private right of action and would be enforced exclusively by the Delaware Department of Justice. If a violation is not cured, the Department of Justice may bring an enforcement proceeding. The DPDPA provides a 60-day cure period for violations until December 31, 2025.

Privacy 52

Privacy Personal data Sales Risk 52

Security Affairs

MAY 25, 2022

I hope the results of Operation Delilah will stand as a reminder to cybercriminals across the world that law enforcement will continue to pursue them, and that this arrest will bring comfort to victims of the suspect’s alleged campaigns,” the Assistant Inspector General added. To nominate, please visit:?.

Cybersecurity 124

Cybersecurity Phishing Security Government 124

DLA Piper Privacy Matters

MARCH 18, 2021

The policy must identify the categories of personal information the business collects from consumers, as well as a list of which of these categories the business discloses, sells or shares or has sold about consumers. The policy must also contain an opt-out right regarding the sale or sharing of personal information.

Privacy 115

Privacy Sales Data collection Data breaches 115

DLA Piper Privacy Matters

SEPTEMBER 15, 2021

Diversity programs (and discrimination practices) based on special category data could be more relaxed. The Court said that there was an infringement of those laws, but just a minor one that would not be relevant in the current pandemic scenario, thus opening the door for their enforcement under different conditions.

GDPR 130

GDPR Privacy Government Personal data 130

Data Matters

NOVEMBER 4, 2020

Third, it creates a new category of businesses: those that voluntarily agree to be subject to the CCPA. The CPRA creates a new category of information called “sensitive personal information.” However, in some cases, the definition of “business” is narrowed. New Rights for Sensitive Personal Information.

Privacy 122

Privacy B2B Sales Data breaches 122

Security Affairs

JUNE 2, 2022

An international law enforcement operation involving 11 countries resulted in the takedown of the FluBot Android malware. An international law enforcement operation involving 11 countries led to the takedown of the infamous FluBot Android malware. ” reads the announcement published by Europol.

Passwords 91

Passwords Access Security Cybersecurity 91

The Last Watchdog

JANUARY 4, 2022

A big reason why APIs haven’t gotten the attention they deserve may be that, from a security standpoint, they fall into a category of hacking tactics known as Living off the Land, or LotL. This is when intruders use pre-installed operating system tools to escape detection while executing unauthorized tasks.

Security 260

Security Digital transformation Cloud Cybersecurity 260

eSecurity Planet

AUGUST 8, 2022

Unfortunately, most organizations don’t complete the setup to enforce a DMARC policy, leading to far less secure email systems than they think they have. Unless an organization sets an enforcement policy to “quarantine” or “reject,” even emails recognized as fraudulent will still be allowed to pass through to inboxes.

IT 117

IT Phishing Authentication Encryption 117

Lenny Zeltser

NOVEMBER 3, 2023

Enforce Accountability Even with the best intentions, those whose primary job isn’t cybersecurity will sometimes forget or not follow through on their security-related responsibilities. Such measures eliminate the opportunity for non-compliance; however, direct enforcement doesn’t work for all security controls and situations.

Cybersecurity 100

Cybersecurity Security Authentication Compliance 100

IBM Big Data Hub

JANUARY 22, 2024

The only data processing activities exempt from the GDPR are national security or law enforcement activities and purely personal uses of data. Supervisory authorities are the regulatory bodies that enforce GDPR requirements. The organization takes extra precautions when processing children’s data or special category data.

GDPR 84

GDPR Compliance Personal data Privacy 84

DLA Piper Privacy Matters

OCTOBER 25, 2022

The databases also held special category personal data including ethnic origin; religion; details of disabilities; sexual orientation, and health information relevant to ill-heath retirement applications. Lower fines are also less likely to result in successful appeals and tie up the ICO’s enforcement team with legal arguments.

Security 52

Security GDPR Personal data Insurance 52

DLA Piper Privacy Matters

OCTOBER 5, 2022

To recap, when the Personal Data Protection Commission is deciding whether a financial penalty is warranted, they will, among other things: assess the incident based on the principles of harm and culpability: “Harm” includes the number of affected individuals, categories of affected personal data, duration of the incident etc.;

Personal data 97

Personal data Compliance Risk Access 97

Hunton Privacy

OCTOBER 8, 2020

The Guidance provides an overview of the ICO’s powers and how it intends to regulate and enforce data protection legislation in the UK, including its approach to calculating fines. On October 1, 2020, the UK Information Commissioner’s Office (“ICO”) launched a public consultation on its draft Statutory Guidance (the “Guidance”).

IT 102

IT Risk Access Government 102

Security Affairs

MAY 24, 2022

Stock urged strong cooperation between governments and law enforcement authorities to prevent nation-state malware will proliferate on the dark web. ” “That is a gap we need to close together, not just law enforcement that require that we build bridges between our siloes, the islands of information.”

Military 107

Military Government Communications Security 107

The Last Watchdog

OCTOBER 10, 2019

CASBs, a term coined by tech industry consultancy Gartner, first cropped about seven years ago to help organizations enforce security and governance policies as they commenced, in earnest, their march into the cloud. In doing so, CASBs became the fastest growing security category ever , as declared by Gartner.

Cloud 200

Cloud Risk Access Security 200

IT Governance

NOVEMBER 28, 2023

This week, we’re taking a slightly different approach with the ‘publicly disclosed data breaches and cyber attacks’ category, presenting the most interesting data points in a table format. The ‘enforcement’ and ‘other news’ categories remain unchanged. This should make it easier for you to quickly find the information you want.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

DLA Piper Privacy Matters

MARCH 18, 2021

Enforcement. The Attorney General instead has the exclusive authority to enforce the law and may seek damages up to $7,500 for each violation (as well as an injunction and attorneys’ fees). a mandatory internal right of appeal process for a controller’s denials of consumer rights requests; and.

Personal data 59

Personal data Sales GDPR Privacy 59

eSecurity Planet

DECEMBER 22, 2021

If you’re currently storing data on individuals that haven’t given their consent and it doesn’t fall into one of the appropriate use categories, you need to give those people the option of withdrawing their consent. You’ll need to create plans for each of your data categories to abide by relevant compliance requirements.

GDPR 144

GDPR Compliance Data Privacy Privacy 144

Security Affairs

MAY 30, 2022

The operation Killer Bee involved INTERPOL’s General Secretariat headquarters and National Central Bureaus (NCBs) and law enforcement agencies from 11 countries across Southeast Asia. . Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. To nominate, please visit:?.

Cybersecurity 126

Cybersecurity Security Access IT 126

Troy Hunt

APRIL 15, 2023

Sponsored by: Kolide ensures only secure devices can access your cloud apps.

Data breaches 78

Data breaches Cloud Access IT 78

Collibra

MAY 21, 2024

Today, we’re thrilled to announce that Collibra has been awarded multiple Communicator Awards for our ‘Do more with trusted data’ campaign in the following categories: Excellence Award for Campaign B2B for Branded Content Distinction Award for Campaign B2B for Integrated & Multi-Channel Distinction Award for Campaign B2B for Online Advertising (..)

Communications 67

Communications Government B2B Marketing 67

Data Protection Report

NOVEMBER 8, 2023

Some requirements also apply specifically to larger covered entities falling under the “Class A companies” category. Implementation timelines have been shared by NYDFS for each categories of organizations subject to the new rules, including covered entities, small businesses, and Class A companies.

Financial Services 111

Financial Services Cybersecurity Compliance Government 111

Security Affairs

JUNE 18, 2022

Department of Justice (DoJ) announced to have shut down the infrastructure associated with the Russian botnet RSOCKS as part of an international police operation that involved law enforcement partners from Germany, the Netherlands, and the U.K. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Computer and Electronics 98

Computer and Electronics Access Manufacturing Sales 98

Security Affairs

JUNE 8, 2022

Enforce multifactor authentication (MFA) for all users, without exception [ D3-MFA ]. Enforce MFA on all VPN connections [ D3-MFA ]. If MFA is unavailable, enforce password complexity requirements [ D3-SPP ]. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Authentication 97

Authentication Passwords Systems administration Manufacturing 97

Data Protection Report

JUNE 22, 2022

Processing special category personal data for AI bias mitigation purposes. However, such consultation is incentivised as it will be taken into account as a mitigating factor during any future investigation or enforcement action. Changes to ICO enforcement. Prior consultation for high risk processing will be now voluntary.

GDPR 144

GDPR Government Personal data Risk 144

Data Protection Report

JANUARY 10, 2023

A Code of Practice has “ statutory force ”, meaning that the ICO must take it into account in respect of any of its enforcement activities. Use of Special Category Data for direct marketing. These considerations are especially relevant in cases where profiling gives rise to special category data, as in the case of Easylife’s fine.

Marketing 105

Marketing B2B Personal data Retail 105

Privacy and Cybersecurity Law

OCTOBER 4, 2021

Once it comes into effect, the PIPL will introduce three pre-conditions for cross-border transfers: requirements for a comparable protection standard of foreign processing, separate consent, and for exporters to carry out impact assessments and maintain records.

Privacy 98

Privacy Personal data Data Privacy Government 98

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Enforcement of the Laws : The enforcement has been primarily focused on consumer or non-financial employee data (e.g., 12 GDPR Enforcement Tracker.

Personal data 100

Personal data GDPR Privacy Records Management 100