Data Matters

AUGUST 5, 2019

On July 25, 2019, Governor Cuomo signed the two bills into law, one which amended the state’s data breach notification law, and another that created additional obligations for data breaches at credit reporting agencies. The Stop Hacks and Improve Electronic Data Security Act. codified at N.Y.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Data Protection Report

JANUARY 6, 2020

The New York State Department for Financial Services regulations require covered entities to have appropriate record retention policies and procedures and the CCPA provides an extra incentive to implement proper information governance to minimise the costs data access requests. In the U.S., Conquer the world!

Privacy 84

Privacy GDPR Data breaches Risk 84

ARMA International

APRIL 18, 2022

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. Definition and Purpose of a Records Retention Schedule.

Personal data 100

Personal data GDPR Privacy Records Management 100

Data Matters

FEBRUARY 12, 2019

The forums won’t likely provide definitive answers, they will likely provide some of the best information available. Updating as needed additional categories of personal information to those enumerated in the bill in order to address changes in technology, data collection practices, obstacles to implementation, and privacy concerns.

Sales 74

Sales Privacy Data Privacy Compliance 74

Data Protection Report

JANUARY 6, 2020

The New York State Department for Financial Services regulations require covered entities to have appropriate record retention policies and procedures and the CCPA provides an extra incentive to implement proper information governance to minimise the costs data access requests. In the U.S., Conquer the world!

Privacy 52

Privacy GDPR Data breaches Risk 52

HL Chronicle of Data Protection

DECEMBER 7, 2018

This blog post provides background on the scope of the exemption and an overview of key considerations for financial institutions developing CCPA compliance programs. The financial services industry is one of the most heavily regulated industries when it comes to protecting the privacy of personal information. Background.

Privacy 40

Privacy Financial Services Compliance Data breaches 40

Data Protection Report

OCTOBER 1, 2019

Readers may recall that New York’s security breach notification law (N.Y. Law § 899-aa) differs from most states’ law in several ways including (1) using separate definitions of “personal information” and “private information;” and (2) providing factors to consider whether personal information had been acquired. 1798.150.

Security 40

Security Financial Services Passwords Risk 40

DLA Piper Privacy Matters

MARCH 3, 2023

The discussion paper, which acknowledges that the Australian Government was “ill-equipped” to respond to the large scale data breaches which occurred in 2022 (namely Medibank and Optus), emphasises the importance of protecting customer data and enduring that Australians can continue to access critical services in the event of a cyber-attack.

Data breaches 52

Data breaches Security Paper Financial Services 52

Hunton Privacy

MAY 13, 2011

Data Breach Notification – These provisions would establish a national data breach reporting system. The heaviest impacts are likely to be felt by the financial services, energy and IT/communication sectors.

Cybersecurity 40

Cybersecurity Data breaches Information Security Financial Services 40

Hunton Privacy

OCTOBER 17, 2012

The earlier discussions focused on a general data protection law that would provide a commonly accepted paradigm for the protection of personal data, but would leave more detailed rulemaking to sector-specific efforts by industry regulatory agencies.

Personal data 45

Personal data Financial Services Data Privacy Data breaches 45

IT Governance

MARCH 11, 2024

66,702,148 known records breached in 103 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 6.9

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

ForAllSecure

JUNE 16, 2021

With that an attacker couldn't necessarily intercept the data, but they could query the peloton API to get user data that they weren't supposed to. In other words, Peloton suffered from an API vulnerability that could potentially lead to a massive data breach. Okay, that's starting to get very personal.

Authentication 52

Authentication Communications IoT Security 52

ForAllSecure

JUNE 16, 2021

With that an attacker couldn't necessarily intercept the data, but they could query the peloton API to get user data that they weren't supposed to. In other words, Peloton suffered from an API vulnerability that could potentially lead to a massive data breach. Okay, that's starting to get very personal.

Authentication 52

Authentication Communications IoT Security 52

IT Governance

JANUARY 16, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data is no longer publicly available. Data breached: >223,000,000 records. Data breached: >7,000,000 records. Data breached: 5,500,000 records.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: more than 59 million data records. BianLian claims to have exfiltrated 5 TB of data, comprising millions of sensitive documents. Akumin Inc.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Data Matters

DECEMBER 23, 2020

The topics on which input is specifically sought include the scope of the covered banking organizations, applicable definitions, standards for notice, method of notice to the regulatory agencies, timeframes for providing notice, and the impact of the proposed rule. Definition of Subject Entities: .

Security 68

Security Cybersecurity Insurance Communications 68

Security Affairs

SEPTEMBER 1, 2023

With more data than expected being written, the extra data can overflow into adjacent memory space triggering the buffer overflow. This is achieved thanks to the second bug, which results from a difference in the SMB protocol’s definition of two related sub commands: SMB_COM_TRANSACTION2 and SMB_COM_NT_TRANSACT.

Phishing 110

Phishing Ransomware Search queries Access 110

Data Matters

MARCH 21, 2022

The reporting requirements will cover multiple sectors of the economy, including chemical industry entities, commercial facilities, communications sector entities, critical manufacturing, dams, financial services entities, food and agriculture sector entities, healthcare entities, information technology, energy, and transportation.

Ransomware 97

Ransomware Cybersecurity Agriculture Communications 97

Thales Cloud Protection & Licensing

NOVEMBER 30, 2020

Two aspects of this new law that are critical for enterprises doing business in California to understand now are: CPRA’s new definition of “Sensitive Personal Information” (SPI). The definition above is much more comprehensive and specific than those we’ve seen in other consumer privacy regulations. Safeguards children’s privacy.

Privacy 62

Privacy GDPR Compliance Data breaches 62

ForAllSecure

JANUARY 19, 2022

You might not think of it as a major aspect of security and yet, stolen credentials are really the key to data breaches today. That's quite a narrow definition. Moffatt: Oh, it's a really good one and you can ask 10 people and you'll easily get five different answers and you definitely get the two counts.

Passwords 52

Passwords Authentication Access Data breaches 52

HL Chronicle of Data Protection

SEPTEMBER 12, 2018

Revised definition of “personal information” The revised definition of “personal information” specifies that the data elements enumerated in the statute only qualify as personal information if they are linked or linkable to a consumer or household. provide additional CCPA analyses and reports.

Privacy 40

Privacy Compliance GDPR Data breaches 40

Data Protection Report

MARCH 16, 2022

Covered entities may operate in a number of critical infrastructure sectors, including energy, financial services, food and agriculture, healthcare, and information technology. The Act’s final rule will further refine and provide clarity as to which entities will fall under the Act’s definition of “covered entity.”.

Ransomware 58

Ransomware FOIA Agriculture Cybersecurity 58

IT Governance

APRIL 29, 2024

5,255,944,117 known records breached in 128 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 94

Data Privacy Privacy Manufacturing Security 94

erwin

MARCH 28, 2019

This also extends to industry-specific other compliance mandates such as those in healthcare, pharmaceutical and the financial services industries. The Regulatory Rationale for Integrating Data Management & Data Governance. The post Business Process Modeling Use Cases and Definition appeared first on erwin, Inc.

Digital transformation 71

Digital transformation Healthcare Compliance Financial Services 71

Data Matters

JUNE 5, 2018

The definition of “banking entity” now excludes insured depository institutions (and their parent companies and affiliates) if (i) the institution has less than $10 billion in total consolidated assets and (ii) the institution’s trading assets and liabilities are less than 5 percent of its total consolidated assets.

Financial Services 68

Financial Services Insurance Privacy Authentication 68

Data Matters

DECEMBER 27, 2018

Given the involvement of the California plaintiff’s bar as a signatory to the letter, it is no surprise that the coalition also seeks to do away with existing limits on the availability of a private right of action (currently only available for data breaches) to allow consumers to sue for violations of any aspect of the law.

Privacy 68

Privacy Data Privacy Personal data Data breaches 68