article thumbnail

Michigan Adopts National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law

Data Matters

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. FOIA Protections. The Act does not, of course, supersede federal privacy or data security laws, such as HIPAA. 6491 (Act). MCL § 500.550. MCL § 500.550.

article thumbnail

US banking regulators promulgate a final rule for 36-hour notice of breach

Data Protection Report

operations of foreign banking organizations) to notify their regulators as soon as possible but no later than 36 hours of identifying a significant “computer-security incident” that results in “actual harm” and rises to the level of a “notification incident” as defined in the final rule. Applicability to Banking Organizations.

FOIA 63
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

UK ICO Outlines the Year Ahead

Hunton Privacy

The Commissioner cautioned against allowing data protection compliance to fall by the wayside in the current, tough economic climate, especially given the inevitable reputational damage caused by big data breaches and the ICO’s power to impose fines.

FOIA 40
article thumbnail

Georgia’s HB 156, requiring state notice for utility cybersecurity incidents, is now in effect

DLA Piper Privacy Matters

Georgia’s governor has signed into law House Bill 156, creating specific notice requirements for state agencies and utilities that experience cybersecurity attacks, data breaches or malware and requiring notice to the state director of emergency management in Georgia within two hours of notifying the federal emergency management agencies.

article thumbnail

Clearview AI has billions of our photos. Its entire client list was just stolen via CNN

IG Guru

Read about this significant breach on images here. The post Clearview AI has billions of our photos. Its entire client list was just stolen via CNN appeared first on IG GURU.

IT 52
article thumbnail

Congress Agrees – 72 Hour Cyber Incident Reporting Requirement to Take Effect

Data Protection Report

The Act will require a “covered entity” to report any “substantial cyber incident” to the Cybersecurity and Infrastructure Security Agency (“CISA”) within 72 hours after the covered entity reasonably believes the incident has occurred. Reporting Requirements. New Government Programs.