IT Governance

MAY 7, 2024

Plus, a further 3,029,461 known records newly breached Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 395 GB.

Data breaches 59

Data breaches Education Manufacturing Retail 59

Hunton Privacy

APRIL 3, 2018

to enact a data breach notification law. The Alabama Data Breach Notification Act of 2018 (S.B. Key Provisions of the Alabama Data Breach Notification Act of 2018: The law applies to “covered entities” and their “third-party agents.” On March 28, 2018, Alabama became the final state in the U.S.

Data breaches 72

Data breaches Encryption Insurance Risk 72

Hunton Privacy

MAY 24, 2018

On April 11, 2018, Arizona amended its data breach notification law (the “amended law”). The amended law also broadens the definition of personal information and requires regulatory notice and notice to the consumer reporting agencies (“CRAs”) under certain circumstances.

Data breaches 53

Data breaches Authentication Passwords Insurance 53

Hunton Privacy

JUNE 14, 2018

Attorney General Notification: If an entity must notify Colorado residents of a data breach, and reasonably believes that the breach has affected 500 or more residents, it must also provide notice to the Colorado Attorney General.

Data breaches 65

Data breaches Security Passwords Military 65

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks: in the spotlight Hathaway breached, 41.5 Data breached: 41,500,000 records. They accessed 41.5

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Hunton Privacy

AUGUST 2, 2021

In passing the law, Connecticut joins a number of other states in expanding the definition of “personal information” in its data breach notification statute. requiring “preliminary substitute notice” to individuals if a business cannot provide direct notification within the 60-day notification timeframe.

Cybersecurity 87

Cybersecurity Insurance Military Data Privacy 87

eSecurity Planet

AUGUST 9, 2022

GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. See the Top Governance, Risk and Compliance (GRC) Tools. Healthcare Data Privacy Laws. Health data and patient data in the U.S. PIPL Raises the Bar – And the Stakes.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

DLA Piper Privacy Matters

JULY 30, 2019

It’s summer, and life’s a breach. A data breach, that is. It’s your service provider’s breach, but it involves your (more likely, your customer’s) data. So put down the beach reading, for some breach reading. Who “owns” a data breach?

Data breaches 45

Data breaches Cybersecurity Financial Services Risk 45

IT Governance

FEBRUARY 14, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Financial information, medical data, health reimbursements, postal addresses, telephone numbers and emails are not thought to have been compromised.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

IT Governance

NOVEMBER 28, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. We’ve also included more details on the top 3 biggest breaches of the week. Breached records: about 9 million. Only 3 definitely haven’t had data breached.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

eSecurity Planet

DECEMBER 7, 2023

Compliance Many compliance standards require some form of encryption for data at rest and many also specify requirements for the transmission of data. For example, The Health Insurance Portability and Accountability Act (HIPAA) requires security features such as encryption to protect patients’ health information.

Encryption 112

Encryption IT Passwords IoT 112

DLA Piper Privacy Matters

DECEMBER 3, 2021

There are also new requirements around transfers of data outside of the UAE and requirements to keep data secure, and to notify the new data protection regulator, and in some circumstances data subjects, of data breaches. Definitions. Data breaches. Exceptions. 44) of 2021.

Personal data 105

Personal data Data breaches GDPR Compliance 105

ARMA International

APRIL 18, 2022

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. Definition and Purpose of a Records Retention Schedule.

Personal data 100

Personal data GDPR Privacy Records Management 100

Data Matters

SEPTEMBER 5, 2018

The CCPA’s original provisions regarding the interaction between the California law and federal laws like the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Gramm-Leach-Bliley Act (GLBA) have caused confusion and consternation. Several of the amendments impact the CCPA’s private right of action for data breaches.

Privacy 68

Privacy Compliance Data breaches Sales 68

Data Matters

AUGUST 5, 2019

On July 25, 2019, Governor Cuomo signed the two bills into law, one which amended the state’s data breach notification law, and another that created additional obligations for data breaches at credit reporting agencies. The Stop Hacks and Improve Electronic Data Security Act.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

HL Chronicle of Data Protection

OCTOBER 8, 2018

Managing the interaction of these new requirements with existing obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), California’s Confidentiality of Medical Information Act (CMIA), and other health privacy laws will continue to be an area of focus in the health privacy community for years to come.

Privacy 45

Privacy Healthcare Sales Insurance 45

Hunton Privacy

FEBRUARY 27, 2015

36) that adds several data elements to the definition of “personal identifying information” in the state’s data breach notification statute. 35) that adds content requirements to the notice that breached entities must send to affected Wyoming residents. On February 23, 2015, the Wyoming Senate approved a bill (S.F.36)

Insurance 40

Insurance Authentication Passwords Data breaches 40

HL Chronicle of Data Protection

OCTOBER 8, 2018

Managing the interaction of these new requirements with existing obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), California’s Confidentiality of Medical Information Act (CMIA), and other health privacy laws will continue to be an area of focus in the health privacy community for years to come.

Privacy 40

Privacy Healthcare Sales Insurance 40

HL Chronicle of Data Protection

OCTOBER 8, 2018

Managing the interaction of these new requirements with existing obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), California’s Confidentiality of Medical Information Act (CMIA), and other health privacy laws will continue to be an area of focus in the health privacy community for years to come.

Privacy 40

Privacy Healthcare Sales Insurance 40

DLA Piper Privacy Matters

APRIL 23, 2020

The law also includes a first-in-the-nation definition of “decisions that produce legal effects concerning individuals or other similarly significant effects concerning individuals.” Effective date, scope of application, key definitions. It applies to all state and local government agencies except for the department of licensing.

Privacy 52

Privacy Government Insurance Data breaches 52

Data Matters

JUNE 29, 2018

It was also the first to enact data breach notification legislation, which all other states have now followed. The definition of personal information under AB 375 is expansive. The citation makes clear that AB 375 intended to refer to HIPAA, the federal Health Insurance Portability and Accountability Act.). Enforcement.

GDPR 79

GDPR Privacy Sales Data breaches 79

ForAllSecure

MAY 17, 2023

Chris Gray of Deep Watch talks about the view from the inside of a virtual SOC, the ability to see threats against a large number of SMB organizations, and the changes to cyber insurance we’re seeing as a result. VAMOSI: Cybersecurity insurance. cyber insurance as a whole was changing heavily. And why is that?

Insurance 40

Insurance Privacy Ransomware GDPR 40

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

The CCPA’s definition of “consumer” is equally broad. This definition therefore not only encompasses a “consumer” in the traditional sense (i.e., The business community is already lobbying the California legislature to narrow this definition. The CCPA governs how businesses treat “consumer” “personal information.”

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Data Matters

JUNE 29, 2018

It was also the first to enact data breach notification legislation, which all other states have now followed. The definition of personal information under AB 375 is expansive. The citation makes clear that AB 375 intended to refer to HIPAA, the federal Health Insurance Portability and Accountability Act.). Enforcement.

GDPR 60

GDPR Privacy Sales Data breaches 60

DLA Piper Privacy Matters

OCTOBER 7, 2021

However the PDPL itself does not refer to a concept of processing for “legitimate interests” in the same manner as the GDPR, and indeed as other data protection frameworks in the region allow for. Credit data access. What are the steps the organisation will take? Who within your organisation is responsible?

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. Genetic Data: California Data Breach Notification and Data Security Law Amendment Bill.

Privacy 98

Privacy Insurance Security Data breaches 98

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

The CCPA’s definition of “consumer” is equally broad. This definition therefore not only encompasses a “consumer” in the traditional sense (i.e., The business community is already lobbying the California legislature to narrow this definition. The CCPA governs how businesses treat “consumer” “personal information.”

Privacy 58

Privacy Sales Education Compliance 58

eSecurity Planet

SEPTEMBER 10, 2021

For ransomware attacks where network data gets encrypted , backups are the definitive method for restoring network infrastructure. Successful ransomware attacks additionally constitute a data breach that can push organizations into violating their governance, risk, and compliance (GRC) obligations.

Ransomware 119

Ransomware Encryption Cybersecurity Access 119

IT Governance

APRIL 9, 2024

67,273,297 known records breached in 130 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

Hunton Privacy

MARCH 2, 2015

“Personal data” is broadly defined under the Act as “any data … under the control of a covered entity, not otherwise generally available to the public through lawful means, and … linked, or as a practical matter linkable by the covered entity, to a specific individual, or linked to a device that is associated with or routinely used by an individual.”

Privacy 40

Privacy Personal data Risk Insurance 40

Data Matters

MARCH 30, 2018

Alabama has joined the ranks of the other 49 states with breach notification requirements by enacting the Alabama Data Breach Notification Act of 2018 (the “Act”). Notification is triggered by a determination of a breach that poses a risk of harm to impacted individuals. And then there were none.

Data breaches 60

Data breaches Insurance Encryption Passwords 60

IT Governance

MARCH 11, 2024

66,702,148 known records breached in 103 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 6.9

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

MARCH 5, 2024

252,796,762 known records breached in 126 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

DECEMBER 5, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: over 300 million records. Data breached: 35 TB. According to Cybernews , one of the data sets contained 13.3 Data breached: 13.3

Data Privacy 106

Data Privacy Privacy Manufacturing Retail 106

IT Governance

APRIL 22, 2024

16,482,365 known records breached in 240 newly disclosed incidents Welcome to this week’s global round-up of the biggest and most interesting news stories. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

IT Governance

JANUARY 3, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. We’ll also soon publish our 2023 review of publicly disclosed incidents and records known to be breached across the year, as well as our quarterly report, so keep an eye on our blog.

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107