Remove category
article thumbnail

NYDFS releases major update to Part 500 cybersecurity requirements for financial services companies

Data Protection Report

On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. Some requirements also apply specifically to larger covered entities falling under the “Class A companies” category. f), is sufficient to trigger this new notice requirement.

article thumbnail

New SEC Cybersecurity Rules Could Affect Private Companies Too

eSecurity Planet

Securities and Exchange Commission (SEC) strongly advised public companies to improve their cybersecurity. However, after minimal corporate adoption of stronger cybersecurity, the SEC has drafted rules to require more formal cybersecurity reporting and disclosure. See the top Governance, Risk & Compliance (GRC) tools.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

European Commission Publishes Draft Data Governance Act

Hunton Privacy

On November 25, 2020, the European Commission published its Proposal for a Regulation on European Data Governance (the “Data Governance Act”). The Data Governance Act is part of a set of measures announced in the 2020 European Strategy for Data , which is aimed at putting the EU at the forefront of the data empowered society.

article thumbnail

GDPR compliance checklist

IBM Big Data Hub

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Schools, hospitals and government agencies all fall under GDPR authority. The organization takes extra precautions when processing children’s data or special category data.

GDPR 81
article thumbnail

Italian National Cybersecurity Perimeter: With great power comes great responsibility!

Privacy and Cybersecurity Law

105, which established the Italian National Cybersecurity Perimeter (“ NCSP ”) and imposed specific obligations on essential operators [1] (“ Operators included in the NCSP ”) to safeguard networks, information systems and IT services that are pivotal to the life and functioning of the nation. National and EU agenda for cybersecurity.

article thumbnail

What is a Managed Security Service Provider? MSSPs Explained

eSecurity Planet

Cybersecurity can be difficult to implement, and to make matters worse, the security professionals needed to do it right are in short supply. This article will explore the nature of MSSPs and how they can help businesses, nonprofits, governments, and other organizations have better security with less effort.

article thumbnail

How to implement the General Data Protection Regulation (GDPR)

IBM Big Data Hub

Identify and protect special category data When inventorying data, organizations should make a note of any especially sensitive data that requires extra protection. The GDPR mandates added precautions for three kinds of data in particular: special category data, criminal conviction data, and children’s data.

GDPR 76