IT Governance

DECEMBER 6, 2023

It’s possible that you now need to appoint a DPO (data protection officer) or data privacy lead to be the single point of contact for questions, concerns, breaches, impact assessments or communication with the regulatory authorities. An ISO 27701 PIMS (privacy information management system).

Data Privacy 59

Data Privacy Privacy GDPR IT 59

Thales Cloud Protection & Licensing

JANUARY 24, 2023

Data Privacy Legislation: What You Should Be Looking for in 2023 divya Wed, 01/25/2023 - 06:31 Comprehensive data protection laws exist across the globe. Lawmakers’ efforts have intensified in the last two years, with many data protection law initiatives being passed and adopted.

Data Privacy 71

Data Privacy Privacy GDPR Compliance 71

Collibra

MAY 12, 2020

In our last blog, we discussed the importance of data governance when building an effective data privacy and compliance program. Now we’re moving a little bit deeper into how your data team can collaborate with others to implement a privacy strategy. Access to personal information benefits every department.

Data Privacy 100

Data Privacy Privacy Sales Marketing 100

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Compromised information includes patients’ personal data, health and medical records, financial data, internal emails and software source code. Data breached: 5 TB.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

MARCH 11, 2024

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Glosbe did not reply, but the open instance was soon closed. of the Standard.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Cross-Border Data Privacy and Security Concerns in the Dawn of Quantum Computing. New EU restrictions could force companies to change data transfer practices and adopt more advanced data encryption methods. In recent years, costly breaches and evolving data security concerns have bubbled up to a board level agenda item.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

Security Affairs

OCTOBER 7, 2020

Earlier this year, Indonesia joined the ranks with the first four ASEAN countries including Malaysia, Singapore, Philippines and Thailand to have enacted laws relating to personal data protection. Some key provisions in the draft personal data protection law are: Personal Data. General personal data v.

Data Privacy 102

Data Privacy Privacy Personal data Computer and Electronics 102

Data Matters

DECEMBER 2, 2020

On November 20, 2020, the Singapore Personal Data Protection Commission (PDPC) published a set of draft advisory guidelines (the Advisory Guidelines) to provide clarification on recent amendments to the Personal Data Protection Act (the PDPA Amendments). via email or hyperlink) may justify a shorter opt-out period.

Data Privacy 74

Data Privacy Privacy Data breaches Personal data 74

Data Matters

APRIL 11, 2019

The Malaysia Personal Data Protection Act applies to all companies operating in Malaysia, as well as persons not established in Malaysia, if they use equipment in Malaysia for the processing of personal data otherwise than for the purposes of transit through Malaysia.

Data Privacy 68

Data Privacy Privacy Data breaches Personal data 68

Collibra

JANUARY 14, 2020

Data privacy isn’t about compliance — it’s about customers. Although much of the ink spilled around data privacy focuses on obeying regulations such as the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), it’s a mistake to think about data privacy as a compliance exercise.

Digital transformation 52

Digital transformation Data Privacy Privacy IoT 52

IT Governance

JANUARY 3, 2024

TB exfiltrated Comcast Cable Communications, LLC (Xfinity) Source 1 ; source 2 (New) Telecoms USA Yes 35,879,455 Tecnoquadri Srl Source (New) Manufacturing Italy Yes 33,000,000 Asia Insurance Co. The post The Weeks in Cyber Security and Data Privacy: 18 – 31 December 2023 appeared first on IT Governance UK Blog.

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107

The Last Watchdog

AUGUST 1, 2019

Just a few days before Capital One’s disclosure, Equifax rather quietly agreed to pay up to $700 million to settle consumer claims and federal and state investigations into its 2017 data breach that compromised sensitive information of more than 145 million American consumers.

Data Privacy 198

Data Privacy Privacy Data breaches Cloud 198

Collibra

JANUARY 28, 2019

For companies, getting data privacy right is no longer just a compliance exercise – a box to be ticked. Instead, having a robust approach to managing personal data well is beginning to be seen as an important competitive advantage for organizations. Today – January 28 – is Data Privacy Day around the globe.

Personal data 40

Personal data Compliance Data Privacy Data breaches 40

IT Governance

NOVEMBER 20, 2023

have notified 330,000 people that their personal data might have been compromised as part of the MOVEit Transfer data breach. Compromised personal data included names, Social Security numbers, driver’s licence/state ID numbers or financial account numbers.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

IT Governance

FEBRUARY 14, 2024

Data breached: >33,000,000 people’s data. Thailand’s Department of Older Persons breached, exposing almost 20 millio n personal data records The Department of Older Persons, part of Thailand’s Ministry of Social Development and Human Security, suffered a data breach in which 19,718,687 rows or personal data was exposed.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

NOVEMBER 28, 2023

They notified SAP SE, which responded “in the most professional and efficient manner”, remediating the issue, launching an investigation and maintaining communications with Aqua Nautilus. The post The Week in Cyber Security and Data Privacy: 20 – 26 November 2023 appeared first on IT Governance UK Blog.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Data Protection Report

MAY 21, 2020

On 14 May 2020, the Singapore Ministry of Communications and Information ( MCI ) and the Personal Data Protection Commission of Singapore ( PDPC ) announced a public consultation (the Public Consultation ) on the draft Personal Data Protection (Amendment) Bill (the Draft Bill ) and related amendments to the Spam Control Act ( SCA ).

Personal data 64

Personal data Data breaches Compliance Cybersecurity 64

Hunton Privacy

AUGUST 15, 2022

The required one hour of cybersecurity, data privacy and data protection training may be related to attorneys’ ethical obligations with respect data protection and count toward their ethics and professionalism CLE requirements.

Cybersecurity 114

Cybersecurity Privacy Data Privacy Data breaches 114

IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data. 204 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Thales Cloud Protection & Licensing

JANUARY 14, 2020

A barrage of news about data breaches, government surveillance, and corporate misconduct has soured consumer sentiment on current data practices privacy regulators and authorities strive to protect consumer rights and shape the future of data protection. Consumer Rights and Privacy Fines.

Data Privacy 90

Data Privacy Privacy IoT GDPR 90

IT Governance

DECEMBER 19, 2023

An investigation determined that personal data, including names, addresses, phone numbers, Social Security numbers, dates of birth and bank account numbers, belonging to nearly 15 million people was obtained by an unauthorised party between 30 October and 1 November. Data breached: personal data belonging to 14,690,284 individuals.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

eDiscovery Daily

SEPTEMBER 25, 2023

Topics ranged from turning an in-house team from a cost center to a cost savings center, balancing risk, and innovation, navigating data privacy, and successfully handling emerging and long-term eDiscovery challenges. Navigating Data Privacy and Gen AI Generative AI was on the table for discussion as well.

Data Privacy 36

Data Privacy Privacy Libraries Risk 36

Data Matters

OCTOBER 31, 2017

The WP29 is a collective of EU data privacy supervisory authorities (“ DPAs ”). The WP29 guidance regarding personal data breaches has been long awaited. ransomware attack that encrypts the sole copy of relevant personal data); or (iii) unauthorized or accidental alteration of personal data.

Personal data 60

Personal data Data breaches GDPR Risk 60

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. Everything from email addresses to political opinions counts as personal data.

GDPR 81

GDPR Compliance Personal data Privacy 81

DLA Piper Privacy Matters

NOVEMBER 17, 2022

On 14 November 2022, the Office of the Privacy Commissioner for Personal Data (“PCPD”) published two investigation reports for non-compliance of the Personal Data (Privacy) Ordinance (“PDPO”): EC Healthcare’s failure to obtain consent for the use, disclosure, and transfer of patient’s personal data across its group entities; and.

Personal data 52

Personal data Data Privacy Compliance Privacy 52

Data Protection Report

JANUARY 20, 2020

Following the implementation of the GDPR in May, 2018, many jurisdictions moved to review and strengthen existing data privacy and cyber-security laws. In addition, 2019 saw regulators publishing findings in respect of some of the largest data incidents of 2018. million patients. million individuals.

Personal data 128

Personal data Security Data Privacy GDPR 128

Hunton Privacy

JUNE 28, 2016

On June 17, 2016, the National Privacy Commission (the “Commission”) of the Philippines released draft guidelines entitled, Implementing Rules and Regulations of the Data Privacy Act of 2012 (“IRR”), for public consultation. The IRR defines personal data as personal information, sensitive information and privileged information.

Data Privacy 53

Data Privacy Privacy Personal data Computer and Electronics 53

Hunton Privacy

SEPTEMBER 13, 2016

Recently, the National Privacy Commission (the “Commission”) of the Philippines published the final text of its Implementing Rules and Regulations of Republic Act No. 10173, known as the Data Privacy Act of 2012 (the “IRR”). We previously reported on the preceding draft text of the IRR.

Data Privacy 61

Data Privacy Privacy Personal data Data breaches 61

Hunton Privacy

JANUARY 24, 2018

On January 24, 2018, the European Commission issued a communication to the European Parliament and the Council (the “Communication”) on the direct application of the EU General Data Protection Regulation (“GDPR”). EU GDPR – Stronger Protection and New Opportunities. Preparatory Work to Date.

GDPR 45

GDPR Communications Personal data Privacy 45

IBM Big Data Hub

JANUARY 19, 2023

Data privacy regulations, such as the General Data Protection Regulation (GDPR) in the European Union or the California Consumer Privacy Act (CCPA) in the state of California, are inescapable. It goes beyond preventing data breaches or having secure means for data collection and storage.

Data Privacy 60

Data Privacy Customer Experience Privacy Compliance 60

Collibra

JUNE 23, 2023

The ever-growing digitalization of our world has raised significant concerns about data privacy and security, particularly for agencies that manage and process sensitive and confidential information. The urgent need to prioritize data privacy Government agencies must not choose between privacy and security.

Privacy 84

Privacy Government Data Privacy Data breaches 84

AIIM

OCTOBER 27, 2020

The agreements were administered by the US Federal Trade Commission and required that those using the Privacy Shield adhere to seven primary data protection principles and sixteen self-certification principles. Under the GDPR, there are limitations on collecting, processing, reviewing, and producing ESI that contains personal data.

e-Discovery 193

e-Discovery Personal data Privacy GDPR 193

Data Protection Report

AUGUST 4, 2023

In Hong Kong, the Office of the Privacy Commissioner for Personal Data (the PCPD ) recently published a revised Guidance on Breach Handling and Data Breach Notifications (the Guidance ). The relevant DPPs are 4(1) and/or 4(2). There is now a further step: (5) documenting the breach.

Data breaches 98

Data breaches Personal data Risk Compliance 98

Data Protection Report

FEBRUARY 14, 2022

At issue was the transfer of personal data from the EU to the US through the use of Google Analytics. Cookies are only one of many ways to collect/transfer data, meaning Google Analytics and similar services can receive personal data through other means. www.website.com/pg1/?

Analytics 128

Analytics GDPR Personal data IT 128

Hunton Privacy

JANUARY 11, 2017

On January 10, 2017, the European Commission published a communication addressed to the European Parliament and European Council on Exchanging and Protecting Personal Data in a Globalized World (the “Communication”). The Communication aims to facilitate commercial data flows and foster law enforcement cooperation.

Communications 45

Communications Personal data Privacy Marketing 45

Hunton Privacy

NOVEMBER 28, 2018

On November 9, 2018, Serbia’s National Assembly enacted a new data protection law. The Personal Data Protection Law, which becomes effective on August 21, 2019, is modeled after the EU General Data Protection Regulation (“GDPR”).

Personal data 88

Personal data Data breaches GDPR Privacy 88

Hunton Privacy

SEPTEMBER 9, 2021

At present, there is no unified set of privacy or data protection laws at the federal level and there is no single national data privacy regulator. 2 of 2018) prohibits invading the privacy of another person via technological means, without their consent. the Cyber Crimes Law (Federal Law No.

Artificial Intelligence 105

Artificial Intelligence Privacy Communications Data Privacy 105