Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

eSecurity Planet

MARCH 18, 2022

Many security professionals think that if they have done the hard work of securing their organization, that should be enough. Even though drafting IT security policies can be a pain, formal policies provide a valuable resource to protect both the IT team and their organization. Written security policies.

IT 121

IT Compliance Security Access 121

Data Protection Report

OCTOBER 3, 2021

The amendment: Expands the definition of “personal information”; Shortens the notification deadline after discovery of a breach from 90 to 60 days; Removes the requirement to consult with law enforcement as part of a risk assessment; Deems compliant any person subject to and in compliance with HIPAA and HITECH; and.

Data breaches 142

Data breaches IT Insurance Passwords 142

Data Matters

SEPTEMBER 7, 2022

The National Association of Insurance Commissioners (NAIC) held its Summer 2022 National Meeting (Summer Meeting) August 9–13, 2022. The Privacy Working Group has been reviewing state insurance privacy protections regarding the collection, ownership, use, and disclosure of information gathered in connection with insurance transactions.

Insurance 78

Insurance Paper Privacy Risk 78

Data Protection Report

DECEMBER 4, 2023

DPAs ensure compliance with privacy laws by creating obligations for the data processor to maintain the same level of data protection for the controller and the data subjects. Indemnification and Insurance Data controllers are responsible for ensuring compliance with privacy laws.

Insurance 64

Insurance Privacy Compliance Personal data 64

The Last Watchdog

APRIL 3, 2019

This is, in large part, because the complexity of business networks continues to escalate at a time when compliance mandates are intensifying. Not only is the notion of what comprises a perimeter shifting, the definition of what constitutes a “user” is metamorphizing, as well. Compliance matters. Users re-defined.

Digital transformation 140

Digital transformation Insurance Compliance Healthcare 140

Thales Cloud Protection & Licensing

JANUARY 16, 2024

Such outsourcing of ICT services also requires a clear definition of responsibilities, risks and mitigation between financial entities and ICT third-party service providers. That includes banks, insurances, payment institutions, stock market, and many financial management firms (trading, crypt-assets, etc). What is the scope of DORA?

Financial Services 83

Financial Services Cloud Cybersecurity Encryption 83

IT Governance

JANUARY 9, 2024

LockBit claims responsibility for Capital Health security incident The LockBit ransomware group has claimed responsibility for an attack on Capital Health , a healthcare provider in Pennington, New Jersey, last November. Only 1 definitely hasn’t had data breached. They accessed 41.5 Data breached: 41,500,000 records.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Hunton Privacy

NOVEMBER 23, 2021

On November 18, 2021, the Federal Reserve, Federal Deposit Insurance Corporation, and Office of the Comptroller of the Currency issued a new rule regarding cyber incident reporting obligations for U.S. The final rule becomes effective April 1, 2022, and compliance is required by May 1, 2022. banks and service providers.

Insurance 85

Insurance Compliance Security IT 85

Data Matters

AUGUST 9, 2021

With the growing patchwork of state data privacy laws continuing to pose challenges for compliance—and the potential for federal data privacy legislation at the forefront of policy debates—the UPDPA may provide state legislators with a path toward a standardized statutory scheme. Uniform Personal Data Protection Act.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

eSecurity Planet

JANUARY 5, 2024

It aims to prevent unauthorized access, manage data movement, and guard against potential security threats. When creating the firewall policy draft, these elements make up a detailed set of rules and guidelines controlling the use, management, and security configurations of a firewall inside an organization.

Compliance 107

Compliance Access Communications Cybersecurity 107

Hunton Privacy

JUNE 14, 2018

Notice to the Attorney General is required even if the covered entity maintains its own procedures for security breaches as part of an information security policy or pursuant to state or federal law.

Data breaches 65

Data breaches Security Passwords Military 65

eSecurity Planet

DECEMBER 7, 2023

This guide will provide a high level overview of encryption and how it fits into IT through the following topics: How Encryption Works To understand how encryption works, we need to understand how it fits into the broader realm of cryptology, how it processes data, common categories, top algorithms, and how encryption fits into IT security.

Encryption 112

Encryption IT Passwords IoT 112

IBM Big Data Hub

JANUARY 22, 2024

The photo will expedite the recovery process and help when filing a police report or a possible claim with your insurance company. Notify the security team Once you’ve disconnected the affected systems, notify your IT security team of the attack. Start by updating your system passwords, then recover your data from backups.

Ransomware 114

Ransomware Encryption Analytics Data breaches 114

eSecurity Planet

MAY 4, 2023

The goal of ITAM is to ensure that an organization’s IT assets are being used effectively, efficiently and securely while minimizing costs and reducing the risk of data breaches and other security incidents. See the Top IT Asset Management (ITAM) Tools for Security Why is ITAM Important?

IT 104

IT Compliance Cloud Cybersecurity 104

Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

Data Matters

SEPTEMBER 4, 2019

The National Association of Insurance Commissioners (NAIC) held its Summer 2019 National Meeting (Summer Meeting) in New York City from August 3 to 6, 2019. NAIC Evaluating Definition of “Best Interest” to Determine Whether to Impose Such a Standard in the Suitability in Annuity Transactions Model Regulation.

Insurance 68

Insurance Paper Risk Analytics 68

Data Matters

JULY 12, 2019

On July 8, 2019, the long-awaited statement (Statement) on custody of digital asset securities was released jointly by the staffs (Staffs) of the U.S. Securities and Exchange Commission (SEC) Division of Trading and Markets and the Financial Industry Regulatory Authority (FINRA). to the customer’s digital asset wallet).

Security 74

Security Marketing Blockchain Insurance 74

Hunton Privacy

SEPTEMBER 23, 2013

Today, September 23, 2013, marks the deadline for compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Omnibus Rule that was issued in January 2013. Change the notice of privacy practices to be distributed to individuals.

Compliance 40

Compliance Privacy Insurance Risk 40

Data Protection Report

JULY 8, 2019

The issue giving rise to the financial penalty was a security breach relating to the company’s website notified by a user to the CNIL on 12 August 2018. According to SERGIC, the website’s security breach could have impacted around 29,440 users.

GDPR 40

GDPR Personal data Compliance Security 40

DLA Piper Privacy Matters

DECEMBER 3, 2021

International businesses with global privacy compliance programs should seek to expand those to cover the UAE and achieve some synergies. The requirements regarding keeping data secure, and new data breach obligations, will definitely up the ante for businesses in the UAE to take cyber security seriously. Definitions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

Data Matters

APRIL 10, 2020

Businesses will not need to dramatically change compliance plans as the proposed revised regulations seek to refine requirements in prior drafts rather than introduce any wholesale changes to the regulatory framework. For more resources and information on CCPA compliance planning, visit Sidley’s CCPA Monitor.

Privacy 68

Privacy Sales Insurance Compliance 68

Hunton Privacy

APRIL 24, 2015

On April 8, 2015, a New York Assemblyman introduced the Data Security Act in the New York State Assembly that would require New York businesses to implement and maintain information security safeguards. physical safeguards, such as disposing of electronic media so that the information cannot be read or reconstructed.

Security 60

Security Passwords Encryption Insurance 60

Data Matters

MARCH 12, 2019

Over the last few years, States have enacted increasingly aggressive legislation concerning data privacy and security, raising concerns that companies will be subject to a patchwork of different standards. Aligning the Safeguards Rule with State Regimes.

Privacy 68

Privacy IT Information Security Insurance 68

IT Governance

APRIL 23, 2019

The information comprised names, addresses, gender, dates of birth, phone numbers, National Insurance numbers, bank details and salaries. Morrisons argued that it wasn’t responsible for Skelton’s actions and that it had taken all the necessary precautions to secure employees’ data.

Data breaches 82

Data breaches Insurance GDPR Compliance 82

Hunton Privacy

JULY 23, 2015

With the passing of the Act, Connecticut becomes the first state to affirmatively require businesses to provide these security services to consumers. With the passing of the Act, Connecticut becomes the first state to affirmatively require businesses to provide these security services to consumers. State Contractors.

Insurance 49

Insurance Data breaches Encryption Authentication 49

Hunton Privacy

JUNE 6, 2019

The Bill requires vendors to notify the Oregon Attorney General of any breach of security involving the personal information of 250 or more Oregon residents in the most expeditious manner possible and no later than 45 days after discovering the breach.

Data breaches 48

Data breaches Insurance Authentication Compliance 48

Data Protection Report

NOVEMBER 23, 2021

On November 18, 2021, the US federal banking regulators Office of the Comptroller of the Currency, Federal Reserve Board and Federal Deposit Insurance Corporation jointly announced a final rule that will require banking organizations (which includes the U.S. Applicability to Banking Organizations.

FOIA 64

FOIA Data breaches Communications Insurance 64

Data Protection Report

MAY 17, 2019

The bill would have made three significant changes to the CCPA: It would have expanded the consumer’s private right of action from only certain security breaches to any violation of the CCPA. The bill would have deleted that requirement and would have substituted an authorization to provide general guidance on compliance with CCPA.

Retail 40

Retail Privacy Insurance Manufacturing 40

DLA Piper Privacy Matters

AUGUST 23, 2021

However, as with all China laws, the PIPL is drafted as high level principles, and we anticipate additional guidelines will be published in the coming months outlining the practical compliance steps organisations will need to take when updating their China data protection compliance programmes.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Data Matters

AUGUST 5, 2019

Together, the new laws require the implementation of reasonable data security safeguards, expand breach reporting obligations for certain types of information, and require that a “consumer credit reporting agency” that suffers a data breach provide five years of identity theft prevention services for impacted residents.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Hunton Privacy

MAY 7, 2019

This bill also would revise the definition of “deidentified.”. AB 874 : would create a clear and full public record exemption from the definition of “personal information.” AB 1355 : would amend the CCPA to exclude consumer information that is deidentified or aggregate consumer information from the definition of “personal information.”

Privacy 53

Privacy Insurance Sales Government 53

Data Protection Report

JULY 9, 2018

On the security front, as of March 2018, all 50 U.S. These new and amended state data breach laws expand the definition of personal information and specifically mandate that certain information security requirements are implemented. See our earlier post on the California Consumer Privacy Act (“CCPA”) here.

GDPR 40

GDPR Data breaches Personal data Insurance 40

HL Chronicle of Data Protection

OCTOBER 8, 2018

Managing the interaction of these new requirements with existing obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), California’s Confidentiality of Medical Information Act (CMIA), and other health privacy laws will continue to be an area of focus in the health privacy community for years to come.

Privacy 45

Privacy Healthcare Sales Insurance 45

Hunton Privacy

AUGUST 21, 2017

The amendments include several key provisions: Definition of Personal Information. Companies will be required to offer credit monitoring services to affected individuals at no cost for one year if the breach includes a Delaware resident’s Social Security number. Notice to the Attorney General. Credit Monitoring.

Data breaches 53

Data breaches Passwords Insurance Access 53

Hunton Privacy

MAY 24, 2018

The amended law also broadens the definition of personal information and requires regulatory notice and notice to the consumer reporting agencies (“CRAs”) under certain circumstances. Key provisions of the amended law include: Definition of Personal Information. Harm Threshold.

Data breaches 53

Data breaches Authentication Passwords Insurance 53

Hunton Privacy

JANUARY 25, 2013

On January 17, 2013, the Department of Health and Human Services’ (“HHS’”) Office for Civil Rights (“OCR”) released its long-anticipated megarule (“Omnibus Rule”) amending the HIPAA Privacy, Security, Breach Notification and Enforcement Rules. Expanded Pool of Business Associates and Enhanced Requirements.

Compliance 45

Compliance Communications Privacy Sales 45