IT Governance

JANUARY 1, 2019

There are few things organisations fear more than data breaches. The stakes were raised with the enforcement of the EU GDPR (General Data Protection Regulation) in May 2018. Fortunately, IT Governance is here to help. GDPR Data Breach Support Service. Data Flow Mapping Tool.

Data breaches 109

Data breaches GDPR Information Security Risk 109

AIIM

AUGUST 16, 2019

We regularly discuss the value and importance of information governance - at our conference, in our training courses, in our virtual events. How can you move your organization's information governance program forward in the absence of management support or interest? And no organization wants to make the national news for a data breach.

Information governance 96

Information governance Government Paper Data breaches 96

Data Protection Report

JANUARY 21, 2020

The discussion paper on the proposed changes to Hong Kong’s Personal Data (Privacy) Ordinance (Cap.486) The proposals set out in LC Paper. CB(2) 512/19-20(03) (the Paper) are summarised in our earlier post. A definition is needed for “sensitive personal data” in line with international standards.

Government 78

Government Personal data Paper Data Privacy 78

IT Governance

OCTOBER 8, 2018

There are few things organisations fear more than data breaches. The stakes were raised with the introduction of the EU GDPR (General Data Protection Regulation) in May 2018. Fortunately, IT Governance is here to help. Data Flow Mapping Tool. To do this, you will need to conduct regular data flow maps.

Data breaches 109

Data breaches GDPR Information Security Risk 109

Data Protection Report

JANUARY 16, 2020

Earlier this week, Hong Kong’s Panel on Constitutional Affairs (the Panel ) released its discussion paper ( LC Paper. CB(2) 512/19-20(03 ) (the Paper ) seeking views on changes to Personal Data (Privacy) Ordinance (Cap.486) Certainty around data retention periods. 486) (the PDPO ).

Paper 40

Paper Personal data Data breaches Privacy 40

IT Governance

APRIL 18, 2023

Data minimisation requires organisations to process personal data only if it serves a specific purpose, and to retain it for only as long as it’s needed to meet that purpose. This is because the answer will depend on the specific circumstances for processing and using the personal data.

GDPR 132

GDPR Personal data Data breaches Marketing 132

Collibra

JUNE 21, 2023

Source : Databricks, CIO Vision 2025 A short history of AI AI has been around for decades, but it’s only recently that advances in processing power, data volumes, and the invention of Large Language Models (LLMs) have paved the way for the current wave of generative AI. What you need is a governance model for AI.

Government 85

Government IT Risk Privacy 85

IT Governance

MAY 24, 2019

The government will not hesitate to act if businesses don’t continue to make progress in this area and do all they can to ensure vulnerable people are protected.”. Is your personal data at risk? Any time a system requires organisations to access more personal data, the risks associated with that information increase.

Data breaches 64

Data breaches Personal data Paper Risk 64

Data Matters

OCTOBER 26, 2021

The ICO’s response to the UK government’s proposals further presents another pivotal moment for UK data protection law. Being the UK’s lead regulator, the ICO’s response is significant and the UK government will need to take into account its responses before draft legislation takes shape.

Government 97

Government GDPR IT Personal data 97

IT Governance

MARCH 6, 2019

The GDPR (General Data Protection Regulation) isn’t only about preventing data breaches (it’s equally focused on strengthening data subjects’ rights), but organisations have understandably honed in on the importance of effective data protection. How else can IT Governance help?

Information Security 90

Information Security GDPR Data breaches Compliance 90

IT Governance

JULY 2, 2020

The Regulation came into effect on 25 May 2018, and was designed to strengthen the rights of EU residents regarding the way organisations process and use their personal data. Second, if you process EU residents’ personal data, the GDPR still applies. What is personal data?

GDPR 111

GDPR Personal data Data breaches Compliance 111

Data Protection Report

JANUARY 20, 2020

In addition, 2019 saw regulators publishing findings in respect of some of the largest data incidents of 2018. Singapore’s Personal Data Protection Commission (“ PDPC ”) imposed the highest fines to date in respect of a cyber-attack on SingHealth’s patient database system affecting 1.5 million patients.

Personal data 128

Personal data Security Data Privacy GDPR 128

Hunton Privacy

JUNE 14, 2018

Recently, Colorado’s governor signed into law House Bill 18-1128 “concerning strengthening protections for consumer data privacy” (the “Bill”), which takes effect September 1, 2018.

Data breaches 65

Data breaches Security Passwords Military 65

IT Governance

JANUARY 10, 2022

The cyber security landscape offered similarly familiar topics: there were huge data breaches at Facebook and LinkedIn, while the threat of ransomware reached catastrophic levels. You can see more incidents from January in our list of data breaches and cyber attacks.

Security 115

Security Data breaches Ransomware Phishing 115

IT Governance

DECEMBER 30, 2019

Although the GDPR prescribes a penalty regime of fines up to the greater of 4% of annual global turnover or €20 million (about £17 million), the scale of these first fines – and the extent to which the ICO clearly intends to crack down on organisations that fail to properly secure the personal data they process – took most organisations by surprise.

Data breaches 78

Data breaches Personal data GDPR Ransomware 78

IT Governance

JUNE 25, 2020

England’s coronavirus lockdown will all but end on 4 July, with the government allowing pubs, restaurants, cinemas, museums and hotels to reopen. Besides, the Government hasn’t stated what information is required – so you could end up with organisations not collecting enough data to make the process worthwhile.

Government 126

Government Data collection Paper Data breaches 126

IT Governance

SEPTEMBER 15, 2022

Information is at the heart of any organisation, whether it’s business records, personal data or intellectual property. You’re most likely to access data on your work computer or via paper records, but information can be found in many places. What is information security? Get started.

Information Security 126

Information Security Security Computer and Electronics Encryption 126

ARMA International

APRIL 18, 2022

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. Definition and Purpose of a Records Retention Schedule.

Personal data 100

Personal data GDPR Privacy Records Management 100

The Last Watchdog

NOVEMBER 4, 2021

Europe’s General Data Protection Regulations (GDPR) changed the game. Legacy filing systems were not built to keep track of the personal data of specific individuals primarily to be in compliance with the many data protection regulations popping up around the world. Dealing with legacy systems. Less can be more.

Personal data 237

Personal data Unstructured data Privacy Data Privacy 237

IT Governance

MAY 24, 2021

Two in five businesses reported a cyber attack or data breach in the past 12 months, according to the UK government’s Cyber Security Breaches Survey 2021. Among those, 35% reported negative effects including the loss of money, data or other assets. Would you know if your organisation had suffered a data breach?

Phishing 122

Phishing Data breaches Passwords Access 122

IT Governance

JANUARY 19, 2018

Last year, the headlines were laden with cyber attacks and data breaches. million leaked records, not to mention the infamous global WannaCry ransomware attack in May 2017 left a trail of devastation as organisations were blocked out of their data, halting business operations until a ransom was paid. Upcoming UK legislation.

Data breaches 56

Data breaches Paper GDPR Compliance 56

Data Matters

SEPTEMBER 28, 2021

Eric Meyer, Chief Technologist of the FTC, spoke about the FTC’s role in combatting data abuse, and referenced potential approaches to penalties, including forced disclosure of algorithms used to wrongly retrieve data and potential internet access bans. Privacy – Considerations and Understanding.

Privacy 88

Privacy Security IoT Data breaches 88

IT Governance

FEBRUARY 14, 2023

These are the three components of the CIA triad, an information security model designed to protect sensitive information from data breaches. Examples of the CIA triad Confidentiality Data confidentiality is most likely to apply in relation to personal data, such as customers’ names, contact details and payment card information.

IT 105

IT Risk GDPR Information Security 105

Krebs on Security

AUGUST 12, 2020

Adding multi-factor authentication (MFA) at these various providers (where available) and/or establishing a customer-specific personal identification number (PIN) also can help secure online access. YOUR GOVERNMENT. ” In short, although you may not be required to create online accounts to manage your affairs at your ISP, the U.S.

Passwords 341

Passwords Authentication Access Paper 341

IT Governance

MARCH 28, 2019

How was it possible for someone to be so misguided about such a well-publicised regulation, the requirements of which have huge ramifications for the way organisations handle personal data? It continues to be effective for any organisation that processes the personal data of, or monitors the behaviour of, EU residents.

GDPR 92

GDPR Compliance Data breaches Personal data 92

IT Governance

OCTOBER 6, 2020

Data loss refers to the destruction of sensitive information. It’s a specific type of data breach, falling into the ‘availability’ category of data security (the other two categories being ‘confidentiality’ and ‘integrity’). Even if the data loss wasn’t the result of a cyber attack, it’s still classed as a data breach.

IT 98

IT Computer and Electronics Data breaches Risk 98

IT Governance

AUGUST 6, 2018

In our first blog ( sign up to the series here ) , we explore data breaches. We will consider why they happen, what you can do to reduce their likelihood and impact as well as which breaches need reporting to the supervisory authority and what information they will need from you. Understanding what a data breach is.

Data breaches 67

Data breaches Education GDPR Risk 67

IT Governance

OCTOBER 25, 2019

It’s therefore no surprise that so many data breaches are caused by basic mistakes. Studies have repeatedly shown than employee error is one of the leading causes of data breaches. The campaign is designed to boost data protection awareness and help people brush up on their information security practices.

Passwords 58

Passwords Data breaches Phishing Ransomware 58

IT Governance

JUNE 21, 2018

whose data you process, the categories of personal data (name, financial information), the recipients and transfer mechanisms used. If any personal data is unaccounted for, you are not only at risk of a data breach but are also non-compliant with Article 30 of the GDPR.

GDPR 64

GDPR Personal data Risk Cloud 64

Data Protection Report

JANUARY 27, 2020

Data Privacy Day represents a timely opportunity to highlight anticipated significant developments in Canadian privacy law in 2020 that we are monitoring following two major developments from the Government of Canada. enhancing knowledge of how personal data is being used; and. the right to be forgotten.

Data Privacy 55

Data Privacy Privacy Personal data Government 55

IT Governance

MAY 15, 2018

The GDPR creates obligations for businesses that process EU residents’ personal data and allows authorities to impose fines of up to 4% of annual global turnover or €20 million – whichever is greater – if the organisation suffers a data breach.

GDPR 61

GDPR Compliance Data breaches Paper 61

IT Governance

NOVEMBER 20, 2017

This is a surprising result, especially as law firms should understand the consequences of data breaches more than most organisations. Data processors will have direct legal obligations and responsibilities. The introduction of data protection impact assessments. Essential resources to understand and comply with the GDPR.

GDPR 68

GDPR Compliance Paper Data breaches 68

IT Governance

SEPTEMBER 17, 2019

These are related concepts – data privacy violations and information security violations are both generally categorised as data breaches. Information security relates to the way an organisation keeps data accurate, available and accessible only to approved employees. However, they aren’t identical.

Data Privacy 92

Data Privacy GDPR Compliance Privacy 92

Hunton Privacy

FEBRUARY 9, 2017

The Draft Bill is heavily based on the EU General Data Protection Regulation (“GDPR”) that will come into effect in 2018 and maintains the structure of Argentina’s current data protection bill. Comments are also accepted by paper and in English or Spanish.

GDPR 49

GDPR Personal data Privacy Data Privacy 49

IT Governance

DECEMBER 27, 2017

They are the most likely to be targeted by cyber criminals and the repercussions of a data breach could threaten their ability to stay in business. These might include compromised card readers, paper stored in a filing cabinet, a weak database or a secret tap into your wireless network. How IT Governance can help.

Compliance 81

Compliance GDPR Security awareness Paper 81

Data Protection Report

SEPTEMBER 25, 2017

In a bid to keep pace with advancements in the technological landscape, the Singapore Government has in recent months embarked on public consultations on its draft Cybersecurity Bill (the Cyber Bill) and its proposed amendments to Singapore’s Personal Data Protection Act (PDPA) to update the country’s data protection regime.

Cybersecurity 40

Cybersecurity Data breaches Personal data Compliance 40

Hunton Privacy

MAY 24, 2013

On May 23, 2013, the Office of the Privacy Commissioner of Canada (“OPC”) issued a position paper (the “Paper”) proposing revisions to the Personal Information Protection and Electronic Documents Act (“PIPEDA”) to better align PIPEDA with the risks facing a modern information economy. The Paper contains only recommendations.

Privacy 40

Privacy Paper Data breaches Personal data 40