Hunton Privacy

APRIL 18, 2023

state to enact comprehensive privacy legislation. SB 5 now will head to Governor Eric Holcomb for a final signature, where he will have seven days upon transmission to sign SB 5 into law or veto it. This could make Indiana the seventh U.S.

Privacy 132

Privacy Personal data Sales Insurance 132

Data Protection Report

MARCH 21, 2024

Department of Health and Human Services (HHS) issued an updated, 17-page Bulletin titled “Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates (the “Bulletin”). On March 18, 2024, the U.S. Our readers may recall that HHS had originally issued the Bulletin in December of 2002, which we summarized here.

Analytics 45

Analytics Privacy Compliance Marketing 45

Hunton Privacy

MAY 26, 2022

Examples of data include personal identity information; biometric information; health, medical, lifestyle, and wellness information; any data related to workplace activities; and online information. The bill confers certain data rights on employees, including the right to access and correct their data. .

Privacy 108

Privacy Data Privacy Access IT 108

IT Governance

JUNE 30, 2022

You can find the full list below, broken down into categories. Welcome to our June 2022 review of data breaches and cyber attacks. We identified 80 security incidents during the month, resulting in 34,908,053 compromised records. Cyber attacks. Ransomware. hit by cyber criminals (unknown) Acorda Therapeutics, Inc. Learn more.

Data breaches 136

Data breaches Ransomware Personal data Blockchain 136

DLA Piper Privacy Matters

MARCH 18, 2021

Florida appears to be on track to be one of the next states to pass a general privacy law, joining California and Virginia. The Bill would also add a new Section 501.173, which contains the proposed privacy protections for “consumers,” defined as Florida residents and natural persons domiciled in Florida.

Privacy 115

Privacy Sales Data collection Data breaches 115

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Connecticut: An Act Concerning Data Privacy Breaches.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

Data Protection Report

MARCH 21, 2023

We had previously written about an FTC proposed consent order that would prohibit a company from perpetual retention of personal health information. that would prohibit the company from perpetual retention of personal information—a broader category. Proposed Consent The proposed consent agreement includes not only the $7.8

Privacy 59

Privacy Compliance Personal data Government 59

Thales Cloud Protection & Licensing

DECEMBER 11, 2023

ML builds on different types of models for different purposes, for example categorization to determine a document category or Named Entity Recognition (NER) to identify sensitive data across diverse locations. Figure 2 shows the category distribution by business department for all documents in a selected data store.

Unstructured data 83

Unstructured data Cloud Data Privacy GDPR 83

Data Protection Report

MAY 18, 2022

On May 16, 2022, the Office of the Privacy Commissioner of Canada (the “OPC”) released an Interpretation Bulletin (the “Bulletin”) on what it considers to be “sensitive” personal information under the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”). Health Information. Financial Information.

Privacy 126

Privacy Insurance Phishing Risk 126

IT Governance

AUGUST 1, 2022

You can find the full list below, broken into categories. Mary’s, Canada, being held to ransom (unknown) Digital security giant Entrust breached by ransomware gang (unknown) Blue Shield of California and BS Promise Health Plan reveal that members impacted by incident involving OneTouchPoint (1,506). Cyber attacks. Ransomware.

Data breaches 119

Data breaches Ransomware Insurance Access 119

eSecurity Planet

DECEMBER 22, 2021

But in order for businesses to maintain compliance with major privacy laws , they have to have security measures in place before an attack. China’s new data privacy law just went into effect in November 2021. Also Read: China’s Data Privacy Law Poses Challenge for International Companies. Detailed privacy notices.

GDPR 144

GDPR Compliance Data Privacy Privacy 144

IT Governance

JUNE 1, 2023

You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents. IT Governance found 98 publicly disclosed security incidents in May 2023, accounting for 98,226,877 breached records. million) Apria Healthcare suffers security breach (1.8

Data breaches 98

Data breaches Ransomware Insurance Personal data 98

IT Governance

JULY 4, 2023

You can find the full list below, divided into four categories: cyber attacks, ransomware, data breaches, and malicious insiders and miscellaneous incidents. IT Governance found 79 publicly disclosed security incidents in June 2023, accounting for 14,353,113 breached records.

Data breaches 96

Data breaches Ransomware Government Insurance 96

IBM Big Data Hub

JANUARY 22, 2024

The law outlines a set of data privacy rights for users and a series of principles for the processing of personal data. Subjects need not be EU citizens to have data privacy rights under the GDPR. The organization is processing data for reasons of the public interest, such as journalism or public health.

GDPR 84

GDPR Compliance Personal data Privacy 84

Data Matters

APRIL 5, 2018

On 28 February 2018, the Belgian Commission for the Protection of Privacy (the “Privacy Commission”) published a recommendation setting out its approach to Data Protection Impact Assessments (“DPIAs”), and in doing so published a “White List” and a “Black List” of processing operations, pursuant to the General Data Protection Regulation (“GDPR”).

GDPR 92

GDPR Privacy Personal data Education 92

Data Matters

NOVEMBER 4, 2020

The results are in, and California voters have approved the California Privacy Rights Act (CPRA) which was listed on the ballot as Proposition 24. Even so, with these and other new requirements, the CPRA does not go as far as some consumer privacy advocates had hoped it would.

Privacy 122

Privacy B2B Sales Data breaches 122

Data Matters

MARCH 12, 2020

The ICO has also published advice for health care practitioners. The statement also seeks to address certain specific questions: Collection of health data: The ICO is clear that whilst employers have an obligation to protect an employee’s health, this doesn’t provide an unlimited ability to collect excessive volumes of information.

GDPR 83

GDPR Communications Privacy Government 83

Hunton Privacy

JULY 20, 2023

On June 30, 2023, the Delaware House of Representatives passed the Delaware Personal Data Privacy Act ( H.B. state to enact comprehensive privacy legislation. 154 ) (the “DPDPA”), a day after the Delaware Senate passed the legislation. The DPDPA heads to Governor John Carney for a final signature. This could make Delaware the 13th U.S.

Privacy 52

Privacy Personal data Sales Risk 52

Data Protection Report

DECEMBER 5, 2022

Department of Health and Human Services (HHS) issued a 12-page Bulletin titled “ Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates (the “Bulletin”). Regulated entities must ensure that all tracking technology vendors have signed a BAA and that there is an applicable permission prior to a disclosure of PHI.

Privacy 64

Privacy Compliance Risk IoT 64

ARMA International

FEBRUARY 21, 2020

Workplace safety, health monitoring, and convenience top the list of benefits. The devices can monitor, analyze, and alert to dangers in the workplace and can aid in health awareness and enhancement. In the ingestibles category are Bluetooth electronic pills that monitor the inner workings of the human body.

Computer and Electronics 105

Computer and Electronics Privacy Artificial Intelligence IoT 105

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. For example, a business that collects user health data needs stronger protections than one that collects only email addresses. Even the world’s biggest businesses are not free from GDPR woes.

GDPR 79

GDPR Compliance Personal data Privacy 79

DLA Piper Privacy Matters

MARCH 24, 2021

Issues to be addressed include: Data privacy: compliant privacy notices/consents must be given to/obtained from customers using or buying via e-commerce or livestreaming platforms, sites, apps and services on or before collection or use of personal data, including appropriate direct marketing opt-ins and unsubscribe functions.

Personal data 111

Personal data Data Privacy Marketing Compliance 111

IT Governance

NOVEMBER 1, 2022

As always, you can find the full list of data breaches and cyber attacks below, divided into their respective categories. However, it’s a warning sign for all organisations about the dangers of misconfigured Internet-facing servers. Cyber attacks.

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

Data Protection Report

OCTOBER 12, 2023

Where looking to deploy monitoring of remote workers in their homes, employers should take into account that workers have a greater expectation of privacy at home than in the office. The ICO highlights, by way of example, its view that using systems to monitor the content of emails will require the processing of special category data.

GDPR 59

GDPR Mining Risk Privacy 59

Adam Shostack

OCTOBER 9, 2019

Continuum has a blog and a spreadsheet on threat modeling lambdas (as a category, not specific to Amazon Lambda), and also a post on threat modeling with CAPEC. Omada Health has released an interesting threat model (“INCLUDES NO DIRT”) for medical device modeling. Trail of Bits released a threat model for Kubernetes.

Privacy 75

Privacy Security IT 75

DLA Piper Privacy Matters

APRIL 27, 2020

mobile phone), and (ii) backend server solution held by the public health authorities. Indeed, taking into account the fact that the infection transmission chains do not stop at national or regional borders, national health authorities should be technically able to exchange information about infected or exposed individuals.

Personal data 72

Personal data Privacy Cybersecurity Access 72

The Last Watchdog

JANUARY 30, 2019

Late last year, Atrium Health disclosed it lost sensitive data for some 2.65 Related: Atrium Health breach highlights third-party risks. Privacy Shield , as well as the new EU privacy rules known as General Data Protection Regulation or GDPR. The culprit: lax practices of a third-party data and analytics contractor.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Data Matters

OCTOBER 6, 2022

On 7 September 2022, the Information Commissioner’s Office (“ ICO ”) published draft guidance (“ Guidance ”) on privacy-enhancing technologies (“ PETs ”). It is hoped that the Guidance will help organizations have the confidence to utilize PETs to develop innovative applications without compromising on privacy concerns, or trust.

GDPR 88

GDPR Privacy Encryption Compliance 88

Hunton Privacy

JULY 12, 2023

On June 22, 2023, the Oregon House of Representatives passed the Oregon Consumer Privacy Act ( S.B. If signed, the OCPA would make Oregon the 12th state to have enacted comprehensive privacy legislation. 602, which makes the OCPA more proscriptive than other comprehensive state privacy laws.

Privacy 52

Privacy Personal data Insurance Sales 52

IT Governance

JANUARY 3, 2023

As always, you can find the full list below, divided into their respective categories. New Zealand health insurer Accuro says it’s been hacked (unknown). privacy breach by Archives NZ allows people to see records containing sensitive health information of abuse survivors (unknown). Cyber attacks. Ransomware.

Data breaches 115

Data breaches Ransomware e-Discovery Insurance 115

IT Governance

DECEMBER 1, 2022

As always, you can find the full list of data breaches and cyber attacks below, divided into their respective categories. Brazilian health insurance firm Fisco Saúde hit by cyber attack (unknown). Health Care Management Solutions reports security breach (500,000). Cyber attacks. Ransomware.

Data breaches 115

Data breaches Ransomware Personal data Insurance 115

DLA Piper Privacy Matters

MAY 13, 2020

The Information Commissioner’s Office (“ ICO ”) has published guidance for employers on complying with data protection law when taking steps to manage Covid-19 health and safety risk in the workplace (“ Guidance ”). Clearly, many physical health and safety measures that employers can adopt will not require the collection of personal data.

GDPR 126

GDPR Personal data Risk Privacy 126

Data Protection Report

JANUARY 10, 2023

Use of Special Category Data for direct marketing. The Direct Marketing Guidance sets out the rules around using Special Category Data for direct marketing, i.e. that explicit consent must be obtained since it is unlikely that another special category condition would apply to the use of this type of data in this context.

Marketing 105

Marketing B2B Personal data Retail 105

DLA Piper Privacy Matters

MARCH 19, 2020

Organisations are looking to adopt measures that support business continuity, whilst appropriately protecting the health and safety of workers, customers etc and complying with wider public health initiatives. sharing information with public health authorities. sharing information with public health authorities.

GDPR 98

GDPR Personal data Compliance Privacy 98

DLA Piper Privacy Matters

APRIL 30, 2021

The Census 2021 data include personal data of potentially more than 10 million data subjects (the entire population of Portugal), including health and religious data. the CNPD took into account the fact that the data transferred included special category personal data of a large number of individuals.

Personal data 119

Personal data Privacy Access Security 119

Security Affairs

JULY 21, 2021

The platform lists coupons in multiple categories including health, travel, food, services, events. The data breach of such a resource having close ties to the victim’s lifestyle may disclose the vital information affecting user’s privacy globally.

Data breaches 105

Data breaches Sales Retail Phishing 105

ARMA International

APRIL 18, 2022

These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. Certain sectors, such as banking, financial services, health, and insurance have their own data protection and privacy requirements. Conclusion.

Personal data 100

Personal data GDPR Privacy Records Management 100