Privacy and Cybersecurity Law

OCTOBER 4, 2021

Dentons Privacy Community met on September 15, 2021 to discuss how to approach international data transfers in Asia, in particular Singapore, Korea, Hong Kong and China. Last year, three overlapping privacy-related laws were consolidated into the Revised Personal Information Protection Act. Below are the key takeaways. South Korea.

Privacy 98

Privacy Personal data Data Privacy Government 98

Krebs on Security

JUNE 18, 2021

In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. First American Financial Corp.

Insurance 286

Insurance Risk Financial Services Mining 286

eSecurity Planet

DECEMBER 22, 2021

But in order for businesses to maintain compliance with major privacy laws , they have to have security measures in place before an attack. China’s new data privacy law just went into effect in November 2021. Also Read: China’s Data Privacy Law Poses Challenge for International Companies. Detailed privacy notices.

GDPR 144

GDPR Compliance Data Privacy Privacy 144

Hunton Privacy

JULY 9, 2020

On July 1, 2020, the Dubai International Financial Centre (“DIFC”) Data Protection Law No. Data Breach Notification: Controllers are required to notify the Commissioner of Data Protection of any personal data breach that compromises a data subject’s confidentiality, security or privacy. 5 of 2020 came into effect (“New DP Law”).

Personal data 127

Personal data GDPR Data breaches Compliance 127

Hunton Privacy

JULY 20, 2023

On June 30, 2023, the Delaware House of Representatives passed the Delaware Personal Data Privacy Act ( H.B. state to enact comprehensive privacy legislation. 154 ) (the “DPDPA”), a day after the Delaware Senate passed the legislation. The DPDPA heads to Governor John Carney for a final signature. This could make Delaware the 13th U.S.

Privacy 52

Privacy Personal data Sales Risk 52

The Last Watchdog

JANUARY 27, 2022

The FBI recently issued a warning that ransomware gangs are targeting companies during “time-sensitive financial events”, such as mergers and acquisitions. They can be divided into two categories: Pre-Close Risks. The transition process needs to account for: •Data privacy, ownership, and governance. Post-Close Risks.

Privacy 265

Privacy Security Risk Marketing 265

ARMA International

JUNE 19, 2023

Records managers, compliance, finance, information technology, legal, and privacy departments are all concerned with the proper management of information. Privacy : Personal information should be limited in its collection and retention. For records managers, though, their primary focus is the proper management of information.

Records Management 97

Records Management Compliance Privacy IT 97

Data Protection Report

MAY 18, 2022

On May 16, 2022, the Office of the Privacy Commissioner of Canada (the “OPC”) released an Interpretation Bulletin (the “Bulletin”) on what it considers to be “sensitive” personal information under the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”). Financial Information. Health Information.

Privacy 126

Privacy Insurance Phishing Risk 126

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Data Matters

NOVEMBER 4, 2020

The results are in, and California voters have approved the California Privacy Rights Act (CPRA) which was listed on the ballot as Proposition 24. Even so, with these and other new requirements, the CPRA does not go as far as some consumer privacy advocates had hoped it would.

Privacy 122

Privacy B2B Sales Data breaches 122

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Certain sectors, such as banking, financial services, health, and insurance have their own data protection and privacy requirements. Conclusion.

Personal data 100

Personal data GDPR Privacy Records Management 100

DLA Piper Privacy Matters

MARCH 24, 2021

Issues to be addressed include: Data privacy: compliant privacy notices/consents must be given to/obtained from customers using or buying via e-commerce or livestreaming platforms, sites, apps and services on or before collection or use of personal data, including appropriate direct marketing opt-ins and unsubscribe functions.

Personal data 111

Personal data Data Privacy Marketing Compliance 111

eSecurity Planet

SEPTEMBER 23, 2022

This requirement copies the strategies of previous legislation that dramatically improved financial reporting for both public and private companies. Also read: Security Compliance & Data Privacy Regulations. For the board, they must publicly disclose their financial auditing expertise and experience.

Cybersecurity 132

Cybersecurity Compliance Risk Communications 132

Data Matters

JANUARY 12, 2022

The Financial Industry Regulatory Authority (FINRA) has also brought enforcement actions involving the supervision and retention of off-channel digital communications. The rule enumerates many categories of records that are subject to the recordkeeping obligation. FINRA’s Focus on Off-Channel Communications.

Communications 88

Communications Marketing Compliance Security 88

DLA Piper Privacy Matters

MARCH 18, 2021

The VCDPA takes effect January 1, 2023 and is a broad, multi-rights privacy law that, in some ways, resembles the CCPA, GDPR, and other recently proposed state privacy legislation. Virginia’s Governor signed the Virginia Consumer Data Protection Act (“VCDPA”) into law on March 2, 2021. Key provisions.

Personal data 59

Personal data Sales GDPR Privacy 59

eSecurity Planet

APRIL 22, 2022

Cyberattacks are not only a technological problem for companies, but they also represent a very real financial threat. He added that while ransomware may have gotten the most attention and headlines, claims for standard privacy-related incidents, breaches, and more continue. That’s where cyber insurance may be able to help.

Insurance 119

Insurance Ransomware Cybersecurity Marketing 119

Data Protection Report

MAY 31, 2024

1 This includes assessing all relevant qualitative and quantitative factors, such as reputation, customer and vendor relationships, and competitiveness, in addition to financial and operational impacts, as well as potential litigation and regulatory actions. 2 Disclosures under Item 1.05 of Form 8-K (the “Statement”).

Cybersecurity 45

Cybersecurity Privacy Marketing Risk 45

Security Affairs

FEBRUARY 19, 2019

The researchers also looked at existing and drafted legislation related to privacy, content, national strategy, critical infrastructure, commerce, crime and military. The researchers then averaged the rating for each country across all seven categories. Percentage of users impacted by financial malware attacks: 0.9

Cybersecurity 94

Cybersecurity IoT Military Security 94

Security Affairs

JULY 3, 2023

Examples: Customer Personal Identifiable Information, transactional data, inventory records, and financial statements. Semi-Structured Data: Semi-structured data lies between the structured and unstructured categories. Some of the consequences of data loss are; Financial Loss: Financial loss can be devastating to organizations.

Unstructured data 88

Unstructured data Metadata Encryption Data structuring 88

IT Governance

AUGUST 1, 2022

You can find the full list below, broken into categories. Financial information. Financial information. We identified 85 security incidents during the month, resulting in 99,243,757 compromised records. Cyber attacks. Ransomware. Data breaches. Malicious insiders and miscellaneous incidents. In other news….

Data breaches 120

Data breaches Ransomware Insurance Access 120

IT Governance

JUNE 30, 2022

You can find the full list below, broken down into categories. Financial information. Financial information. We identified 80 security incidents during the month, resulting in 34,908,053 compromised records. Cyber attacks. Ransomware. Data breaches. Malicious insiders and miscellaneous incidents. In other news…. Data breaches.

Data breaches 136

Data breaches Ransomware Personal data Blockchain 136

Data Matters

OCTOBER 22, 2019

In the summer of 2018, the California Legislature drafted and passed the California Consumer Privacy Act (CCPA) in record time. Businesses, consumer advocates, and privacy watchers thus have been eagerly waiting for over a year for the Attorney General to propose the regulations the CCPA requires him to promulgate.

Privacy 60

Privacy Sales Paper Compliance 60

Security Affairs

JULY 21, 2021

The platform lists coupons in multiple categories including health, travel, food, services, events. The data breach of such a resource having close ties to the victim’s lifestyle may disclose the vital information affecting user’s privacy globally. Same year – Ticketmaster ’s U.K. division was slapped with a $1.65

Data breaches 100

Data breaches Sales Retail Phishing 100

Data Matters

SEPTEMBER 7, 2022

1. NAIC to Develop New Privacy Model Law. The NAIC approved the request of the Privacy Protections (H) Working Group (Privacy Working Group) to draft a new model law to enhance consumer protections and specify the corresponding obligations of licensed entities.

Insurance 78

Insurance Paper Privacy Risk 78

AIIM

JANUARY 17, 2018

This is the eighth post in a series on privacy by Andrew Pery. You might also be interested in: Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 83

GDPR Compliance Data collection Privacy 83

Adam Levin

SEPTEMBER 5, 2019

So, we can call this a Facebook privacy facepalm legacy attack. It’s a sad state of Facebook privacy news fatigue that the urge is so strong to create privacy fail sub-categories—but there you have it. The information is at least a year old, which was when Facebook stopped allowing developers to have user phone numbers.

Mining 79

Mining Authentication Financial Services Privacy 79

Data Matters

APRIL 10, 2020

While the world seems to have ground to a halt in so many ways, time still marches on, and along with it, the California Consumer Privacy Act (“CCPA”) enforcement date (July 1, 2020) inches ever closer. Restoration of privacy policy disclosures (§ 999.308). Guidance on user-enabled global privacy controls (§ 999.315).

Privacy 68

Privacy Sales Insurance Compliance 68

Security Affairs

MAY 12, 2021

After the introduction of CCPA and GDPR, much more attention is given to third-party risks, and the privacy terms and conditions users agree to. Global privacy regulations, such as the CCPA and GDPR, were enacted to ensure stricter standards when handling the personal data of consumers. Privacy Violations. Data Protection.

GDPR 80

GDPR Privacy Personal data Data breaches 80

DLA Piper Privacy Matters

AUGUST 19, 2021

Some of these contained personal data and special category (health) data. DDL accepted that it breached the requirements of Articles 13 and/or 14 in relation to the provision of information in its Privacy Notice. The MHRA seized at least 73,000 pieces of paper stored in unlocked crates, boxes and bags.

GDPR 105

GDPR Personal data Compliance Risk 105

DLA Piper Privacy Matters

AUGUST 23, 2021

Rather than bringing substantial changes to the existing China data privacy framework, the PIPL helpfully consolidates and clarifies obligations on processing of personal information at a national law level. To be clear, this is not China’s own GDPR.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Collibra

JULY 15, 2020

In the world of data privacy, data subject rights are the hot topic for Chief Data Officers, Data Protection Officers, and all people who work with data right now. After months of anticipation, the newly enforced California Consumer Privacy Act (CCPA) is officially here and adding complexity to data subject rights.

Data Privacy 72

Data Privacy GDPR Privacy Personal data 72

The Last Watchdog

JULY 27, 2020

Likewise, the COVID-19 contact tracing app developed by Apple and Google continues to evoke concerns that it will end up leveraging AI to normalize privacy invasion. AI tools are designed to put people into categories, Shashanka says. Categorizing people incorrectly, on the other hand, is a minefield of potential bad outcomes.”

IT 304

IT Government Artificial Intelligence Personal data 304

Thales Cloud Protection & Licensing

AUGUST 15, 2019

375 the California Consumer Privacy Act (CCPA), making California the first U.S. state to pass its own data privacy law. There are some exceptions to this deletion requirement though, such as if the PI is needed to complete a financial transaction. (5) The CCPA, which will come into effect on Jan. Currently, every U.S.

Privacy 92

Privacy GDPR Digital transformation Sales 92

IT Governance

MAY 15, 2024

I’d say that the separate category just filters out those controls better. Having a separate category for those controls makes this more practical to do. In addition, you need to be aware of your privacy obligations. Is this an acknowledgement that physical security can be overlooked? What about physical security monitoring?

Security 52

Security Information Security Access Cloud 52

Data Matters

FEBRUARY 12, 2020

Just as companies were starting to recover from their exertions to put in place California Consumer Privacy Act (“CCPA”) compliance programs before the law’s January 1, 2020 entry into force, the California Attorney General (“AG”) provided an early February surprise. Clarifications with respect to employee notifications (§ 999.305).

Privacy 68

Privacy Compliance Archiving Sales 68

IT Governance

NOVEMBER 28, 2023

This week, we’re taking a slightly different approach with the ‘publicly disclosed data breaches and cyber attacks’ category, presenting the most interesting data points in a table format. The ‘enforcement’ and ‘other news’ categories remain unchanged. This should make it easier for you to quickly find the information you want.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

HL Chronicle of Data Protection

MAY 26, 2020

The California Privacy Rights Act (CPRA) is progressing through California’s elections process for inclusion on the November 2020 ballot. Businesses may want to begin considering how their data privacy obligations in California may change if voters enact CPRA. California Privacy Protection Agency (new). Storage Limitation (new).

Privacy 66

Privacy Compliance Sales Data Privacy 66