Data Matters

FEBRUARY 10, 2021

On February 4, 2021, the New York Department of Financial Services (NYDFS) issued Circular Letter No. Silent cyber insurance risk, the Framework explains, is risk that an insurer must cover loss from a traditional insurance policy that does not expressly mention cyber risks. Rigorously Measure Insured Risk.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

AIIM

JANUARY 26, 2018

A new set of European rules and standards related to privacy and data protection (the General Data Protection Regulation , or GDPR ) has set in motion a mad compliance and security scramble not only for European companies, but also for any company doing business in Europe or with European customers. 3 -- Governance and oversight.

GDPR 93

GDPR Compliance Archiving Privacy 93

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 68

Financial Services Cybersecurity Insurance Risk 68

Hunton Privacy

FEBRUARY 7, 2023

On January 26, 2023, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth responded to a call for input from the UK’s Digital Regulation Cooperation Forum (DRCF) on its workplan for 2023 – 2024. The ICO, for example, has already developed an accountability framework. You can read CIPL’s full submission here.

Data Privacy 61

Data Privacy Blockchain Compliance Privacy 61

IBM Big Data Hub

MARCH 20, 2024

For highly regulated industries, these challenges take on an entirely new level of expectation as they navigate evolving regulatory landscape and manage requirements for privacy, resiliency, cybersecurity, data sovereignty and more. Read to learn more about cloud adoption within financial services?

Cloud 74

Cloud Financial Services Risk Business Services 74

IBM Big Data Hub

FEBRUARY 22, 2024

We strongly believe the influx of data associated with AI will fuel tremendous business innovations, but requires strategic considerations, including around where data resides, data privacy, resilience, operational controls, regulatory requirements and compliance, and certifications. And our work doesn’t stop there.

Cloud 74

Cloud Computer and Electronics Compliance Financial Services 74

Data Protection Report

DECEMBER 23, 2019

This blogpost summarises our recent webinar: “ An urgent message from Berlin: The importance of record retention in privacy and cybersecurity ”. The authority claimed a violation of data minimisation and privacy by design principles under the EU General Data Protection Regulation (GDPR). . Why should this be a high priority project?

Privacy 144

Privacy Compliance Personal data Risk 144

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. Further, managing the short-term and long-term policies and procedures of your organization can be challenging without an effective GRC strategy in place.

Compliance 57

Compliance Risk Government Retail 57

Data Matters

OCTOBER 1, 2021

We work with clients to identify and address potential compliance gaps and program enhancements in order to mitigate the effect of supervisory actions. Consumer financial services providers need to be aware of, and in compliance with, state consumer financial laws in addition to federal consumer financial laws.

Financial Services 158

Financial Services Compliance Risk Privacy 158

Krebs on Security

JUNE 18, 2021

According to SimpleShowing.com , there are actually two title insurance policies in each transaction — one for the buyer and one for the lender (the latter also needs protection as they’re providing the mortgage to purchase the home). But the company never acted to fix it until the news media came calling.

Insurance 286

Insurance Risk Financial Services Mining 286

Thales Cloud Protection & Licensing

JANUARY 10, 2024

Navigating the EU-US Data Protection Framework sparsh Thu, 01/11/2024 - 05:26 On 10 July 2023, the European Commission adopted a new adequacy decision regarding the Data Privacy Framework (“DPF”). This follows the invalidation of the EU-US Privacy Shield, by the Court of Justice of the European Union on 16 July 2020.

Data Privacy 83

Data Privacy Personal data Privacy Cloud 83

Data Protector

JANUARY 29, 2017

Does it really mean that in 481 days, European privacy regulators will be heralding the first megafine for non-compliance with one of the GDPR’s more obscure requirements? And also, what standard of evidence is necessary to be generated, just in case privacy regulators exercise their Article 30(4) right to request it.

GDPR 136

GDPR Privacy Compliance Personal data 136

IBM Big Data Hub

MAY 9, 2023

Scaling with growing AI regulations With the increasing number of AI regulations, responsibly implementing and scaling AI is a growing challenge, especially for global entities governed by diverse requirements and highly regulated industries like financial services, healthcare and telecom.

Data science 71

Data science Artificial Intelligence Metadata Compliance 71

IBM Big Data Hub

OCTOBER 4, 2022

With the growing number of AI regulations, responsibly implementing and scaling AI is a growing challenge, especially for global entities governed by diverse requirements and highly regulated industries such as financial services, healthcare and telecom. Where do you go from here? Register for AI Governance webinar.

Government 97

Government Artificial Intelligence Metadata Data science 97

Collibra

APRIL 14, 2022

The availability and use of trustworthy data is critical for asset managers – whether it’s for financial planning, portfolio management, advisory services, research, investments, regulatory compliance, or financial reporting. And risk and regulatory compliance are tightly intertwined.

Compliance 52

Compliance Cloud Metadata Risk 52

Data Matters

JANUARY 20, 2021

Office of the Comptroller of the Currency (OCC) issued its controversial final rule (Rule) 1 to establish a new requirement for covered banks to provide “fair access” to financial services to both natural persons and legal entities. 3) not deny, in coordination with others, any person a financial service the covered bank offers.

Access 68

Access Financial Services Marketing Risk 68

Reltio

DECEMBER 10, 2021

Reltio serves several retail, travel and hospitality, and financial services customers that experience significant seasonal spikes in their usage. Many customers, including those in financial services and healthcare, say using Reltio allowed them to adopt other cloud solutions more quickly and implement their “cloud-first” strategy.

MDM 98

MDM Analytics Digital transformation Cloud 98

Thales Cloud Protection & Licensing

NOVEMBER 27, 2018

The cybersecurity regulation ( 23 NYCRR 500 ) adopted by the New York State Department of Financial Services (NYDFS) is nearly two years old. Even though these regulations only apply to New York, financial institutions across the U.S. Interested in learning how Thales helps businesses achieve compliance?

Cybersecurity 71

Cybersecurity Financial Services Encryption Data Privacy 71

Data Matters

JUNE 24, 2021

3 The SEC and its staff followed the September 2017 statement with various cybersecurity-related initiatives and guidance, including January 27, 2020, cybersecurity guidance and observations published by the SEC’s Division of Examinations (formerly Office of Compliance Inspections and Examinations). 20, 2017). 27, 2020). 5 83 FR 8166 (Feb.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Data Protection Report

FEBRUARY 8, 2022

EyeMed’s privacy policy stated that the company would “follow generally accepted industry standards to protect the personal information submitted to us, and to guard that information against loss, misuse or alteration. EyeMed notified affected individuals and offered credit monitoring, fraud consultation, identity theft restoration.

Passwords 98

Passwords Financial Services Authentication Insurance 98

Data Protection Report

SEPTEMBER 28, 2021

Compliance program. The Government proposes introducing a flexible and risk-based accountability framework requiring an organisation to implement a privacy management programme (ie a compliance program) which would reflect the type of personal data and type of processing an organisation does. Complaints and DSARs.

Government 120

Government FOIA GDPR Compliance 120

Data Protection Report

DECEMBER 23, 2019

This blogpost summarises our recent webinar: “ An urgent message from Berlin: The importance of record retention in privacy and cybersecurity ”. The authority claimed a violation of data minimisation and privacy by design principles under the EU General Data Protection Regulation (GDPR). . Why should this be a high priority project?

Privacy 52

Privacy Compliance Personal data Risk 52

Data Protection Report

OCTOBER 24, 2022

On October 18, 2022, the New York Department of Financial Services announced a settlement with EyeMed, a licensed life, accident, and health insurer, with respect to a security incident that occurred in 2020. Nevertheless, EyeMed certified its compliance with the Cybersecurity Regulation annually, from 2018-2021. Background.

Cybersecurity 52

Cybersecurity Personal data Risk Financial Services 52

Data Protector

AUGUST 19, 2017

As May 2018 looms, I’m aware of a growing number of companies that are seeking help with their GDPR compliance obligations. Many (me included) have been sent a stream of emails from self-styled “GDPR experts” containing dire warnings of ginormous fines for non-compliance. For most of them, it's a huge wake-up call. Of course not.

GDPR 120

GDPR Compliance Records Management Financial Services 120

eSecurity Planet

SEPTEMBER 10, 2021

The diagram below, for example, shows that application-level controls are Microsoft’s responsibility with software as a service (SaaS) models, but it is the customer’s responsibility in IaaS deployments. What compliance requirements does the provider support? Establish and enforce cloud security policies.

Cloud 132

Cloud Security Encryption Risk 132

erwin

APRIL 11, 2019

Some suggest the California Consumer Privacy Act (CCPA), which takes effect January 1, 2020, sets a precedent other states will follow by empowering consumers to set limits on how companies can use their personal information. Compliance is an on-going requirement, so efforts to become compliant should not be treated as static events.

GDPR 100

GDPR e-Discovery Compliance Metadata 100

Thales Cloud Protection & Licensing

APRIL 1, 2021

Today’s remote working environment relies heavily on the collaborative sharing of information, challenging organizations to maintain the security of confidential data and regulatory compliance while driving employee productivity. Enhanced control and security over sensitive data in Microsoft Azure with Luna HSMs.

Encryption 79

Encryption Compliance Cloud GDPR 79

ARMA International

APRIL 18, 2022

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. 4 Consumer Protection Privacy Act. 6 Colorado Privacy Act.

Personal data 100

Personal data GDPR Privacy Records Management 100

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. Further, managing the short-term and long-term policies and procedures of your organization can be challenging without an effective GRC strategy in place.

Compliance 67

Compliance Risk Government Retail 67

Data Matters

APRIL 20, 2021

A formal vendor selection program that maintains records of vendors’ responses to the questions would further strengthen the program’s maturity and the plan sponsor’s ability to demonstrate compliance with the Cybersecurity Guidance.

Cybersecurity 68

Cybersecurity Insurance Risk Compliance 68

Gimmal

MAY 31, 2023

The introduction of the MaaS offering represents a synergistic blend of our expertise, enabling us to provide a more holistic solution for our clients as they navigate the complexities of today’s data privacy and information governance landscape,” said Jason Velasco, CEO of Kindato.

Information governance 52

Information governance ECM Government Financial Services 52

IBM Big Data Hub

SEPTEMBER 27, 2022

Whether it be financial services, employee hiring, customer service management or healthcare administration, AI is increasingly powering critical workflows across all industries. Add navigating complex compliance regulations and standards to the mix, and the need for a solid and trustworthy AI strategy becomes clear.

Government 52

Government Compliance Data science Financial Services 52

AIIM

JANUARY 10, 2019

A potentially problematic challenge for industry and legislators is the apparent tension between privacy rights and the rapid adoption of blockchain-based applications which are expected to reach $10.6 There is a school of thought that blockchain is antithetical to and incompatible with safeguarding privacy rights.

Blockchain 115

Blockchain GDPR Privacy Personal data 115

DLA Piper Privacy Matters

AUGUST 23, 2021

Rather than bringing substantial changes to the existing China data privacy framework, the PIPL helpfully consolidates and clarifies obligations on processing of personal information at a national law level. To be clear, this is not China’s own GDPR.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

eDiscovery Daily

MARCH 24, 2019

Last week at the University of Florida E-Discovery Conference , I talked about the California Consumer Protection Act (CCPA) as one of the things that organizations need to be prepared to address these days as part of their compliance obligations. Sounds like a lot of organizations haven’t gotten around to that just yet.

Data Privacy 50

Data Privacy Privacy e-Discovery Compliance 50

ARMA International

DECEMBER 26, 2019

in 2017), with the remainder reporting into senior administrative roles, compliance, corporate services, or finance teams. Coordination of policies and priorities may have stalled. The top objection to using the cloud for digital records continues to be potential privacy or security concerns – no change from 2017.

Content services 76

Content services Cloud Records Management Privacy 76

Data Matters

OCTOBER 8, 2020

Treasury’s Financial Crimes Enforcement Network (FinCEN), OFAC is sending a clear signal that making ransomware payments with a sanctions nexus threatens U.S. national security interests and that third-party service providers that facilitate ransomware payments on behalf of a victim must consider and ensure compliance with OFAC regulations.

Ransomware 68

Ransomware Compliance Risk Government 68