Remove Data collection Remove Insurance Remove Military Remove Passwords
article thumbnail

Connecticut Tightens its Data Breach Notification Laws

Data Protection Report

credit or debit card number, or any financial account number in combination with any required security code, access code or password that would permit access to such financial account. 60-Day Notification Window.

article thumbnail

Happy 13th Birthday, KrebsOnSecurity!

Krebs on Security

Internal Revenue Service website for months: Anyone seeking to create an account to view their tax records online would soon be required to provide biometric data to a private company in Virginia — ID.me. The data is published after Medibank reportedly declines to pay a US$10 million ransom demand. ” SEPTEMBER.

Passwords 238
article thumbnail

An Approach to Cybersecurity Risk Oversight for Corporate Directors

Data Matters

Board-management discussions about cyber risk should include identification of which risks to avoid, which to accept, and which to mitigate or transfer through insurance, as well as specific plans associated with each approach. Principle 5. Mandatory Access Control. Role-Based Access Control. Authentication and Lifecycle Management.