article thumbnail

Connecticut Tightens its Data Breach Notification Laws

Data Protection Report

The amendment: Expands the definition of “personal information”; Shortens the notification deadline after discovery of a breach from 90 to 60 days; Removes the requirement to consult with law enforcement as part of a risk assessment; Deems compliant any person subject to and in compliance with HIPAA and HITECH; and.

article thumbnail

Colorado Amends Data Breach Notification Law and Enacts Data Security Requirements

Hunton Privacy

Recently, Colorado’s governor signed into law House Bill 18-1128 “concerning strengthening protections for consumer data privacy” (the “Bill”), which takes effect September 1, 2018.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

2022 Cyber Security Review of the Year

IT Governance

Cyber criminals continued to wreak havoc, with the likes of Twitter , Uber and Neopets all reporting mammoth data breaches. In total, we have so far reported more than 1,000 data breaches in 2022, with almost half a billion breached records. Did anyone purchase the apparently stolen data?

Security 132
article thumbnail

Cyber recovery vs. disaster recovery: What’s the difference? 

IBM Big Data Hub

Disaster recovery (DR) is a combination of IT technologies and best practices designed to prevent data loss and minimize business disruption caused by an unexpected event. Reduced costs from unplanned events: Cyber and disaster recovery can be expensive, with critical assets like employees, data and infrastructure being threatened.

article thumbnail

Weekly podcast: SHEIN, Tesco Bank, UK cyberwarfare unit and Uber

IT Governance

Big numbers this week: we discuss a data breach affecting 6.42 The online fashion retailer SHEIN (I’ve probably pronounced that wrong) has said that it suffered a data breach from June to August this year involving the personal information of approximately 6.42 Here are this week’s stories. million customers.

article thumbnail

Weekly Podcast: Russian cyber crimes, Facebook breach and Tory conference app

IT Governance

This week, we discuss Russian cyber crime, the Facebook breach affecting 90 million users and the Conservative Party’s conference app breach. Under the GDPR they must notify the ICO within 72 hours of becoming aware of a personal data breach, if it could pose a risk to people’s rights and freedoms.”.

article thumbnail

Weekly podcast: 2018 end-of-year roundup

IT Governance

Also in January, the ICO (Information Commissioner’s Office) fined Carphone Warehouse £400,000 – one of the largest fines it issued under the DPA (Data Protection Act) 1998 – for multiple security inadequacies that led to a 2015 data breach in which three million customers’ personal data was compromised.