Data Protection Report

FEBRUARY 27, 2024

On 1 and 2 February 2024, at the fourth 4 th ASEAN Digital Ministers Meeting ( ADGMIN ) in Singapore, ASEAN [1] unveiled: the updated Joint Guide to ASEAN Model Contractual Clauses and EU Standard Contractual Clauses ( Joint MCC – SCC Guide ); and the ASEAN Guide on AI Governance and Ethics ( ASEAN AI Governance Guide ).

Government 59

Government Personal data Compliance Risk 59

IT Governance

FEBRUARY 14, 2024

Data breached: >33,000,000 people’s data. Thailand’s Department of Older Persons breached, exposing almost 20 millio n personal data records The Department of Older Persons, part of Thailand’s Ministry of Social Development and Human Security, suffered a data breach in which 19,718,687 rows or personal data was exposed.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Hunton Privacy

MAY 10, 2022

On May 10, 2022, Connecticut Governor Ned Lamont signed An Act Concerning Personal Data Privacy and Online Monitoring , after the law was previously passed by the Connecticut General Assembly in April. Connecticut is now the fifth state to enact a consumer privacy law.

Privacy 118

Privacy Personal data Sales B2B 118

IT Governance

NOVEMBER 28, 2023

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). Breached records: more than 56 million.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

FEBRUARY 21, 2024

In January 2024, it identified more potential victims, and has now written to inform them that their personal data may have been compromised in the incident. Data breached: 2,632,275 people’s data. 204 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Thales Cloud Protection & Licensing

OCTOBER 4, 2022

This year, the Cybersecurity and Infrastructure Security Agency (CISA) and the National Cybersecurity Alliance (NCA) coordinate the collaboration between the government and industry, running a human-centric campaign themed “See Yourself in Cyber”. Raising awareness is essential for everyone. Raising awareness is essential for everyone.

Authentication 127

Authentication Passwords Cybersecurity Personal data 127

Hunton Privacy

JULY 12, 2012

On June 27, 2012, the Hong Kong Legislative Council passed a bill to amend the Personal Data (Privacy) Ordinance (the “Ordinance”). Most provisions will become effective on October 21, 2012, and the others will take effect on a day to be announced by publication in the Hong Kong Government Gazette.

Personal data 40

Personal data Data Privacy Privacy Marketing 40

Collibra

FEBRUARY 16, 2022

Data governance is the practice of managing and organizing data and processes to enable collaboration and compliant access to data. Data governance allows users to create value from data assets even under constraints for security and privacy. No , you can’t use the data for that .

Government 52

Government IT Compliance Privacy 52

Hunton Privacy

JUNE 28, 2016

On June 17, 2016, the National Privacy Commission (the “Commission”) of the Philippines released draft guidelines entitled, Implementing Rules and Regulations of the Data Privacy Act of 2012 (“IRR”), for public consultation. The IRR defines personal data as personal information, sensitive information and privileged information.

Data Privacy 53

Data Privacy Privacy Personal data Computer and Electronics 53

IT Governance

JUNE 1, 2022

If you’re facing a cyber security disaster, IT Governance is here to help. State Bar of Georgia investigating cyber attack (unknown) US Department of Defense tricked into paying $23.5 State Bar of Georgia investigating cyber attack (unknown) US Department of Defense tricked into paying $23.5

Data breaches 126

Data breaches Ransomware Phishing Education 126

IT Governance

MAY 7, 2024

A further 381,000 New York City public school students affected by 2022 data breach In January 2022 , personal data from around 820,000 New York City public school students, both current and former, was breached. Data breached: 1,201,000 people’s data. Data breached: 395 GB.

Data breaches 59

Data breaches Education Manufacturing Retail 59

IT Governance

OCTOBER 21, 2021

The need for experienced and qualified cyber security professionals is a highlight of Cybersecurity Career Awareness Week , led by NICE (National Initiative for Cybersecurity Education). The most common skills gaps are “storing or transferring personal data, setting up configured firewalls, and detecting and removing malware”.

Security 111

Security Information Security GDPR Data Privacy 111

IBM Big Data Hub

JANUARY 19, 2023

Data privacy regulations, such as the General Data Protection Regulation (GDPR) in the European Union or the California Consumer Privacy Act (CCPA) in the state of California, are inescapable. It goes beyond preventing data breaches or having secure means for data collection and storage.

Data Privacy 60

Data Privacy Customer Experience Privacy Compliance 60

Collibra

MARCH 12, 2020

CCPA and GDPR were just the beginning of a wave of data privacy regulations. New York and Massachusetts legislators are ramping up conversations about data privacy and the British Parliament is rethinking its policies after Brexit. 2) Use your data governance framework as the foundation of your data privacy strategy.

Data Privacy 59

Data Privacy Privacy Government Compliance 59

IT Governance

OCTOBER 3, 2019

You must tell people when you’re collecting their personal information to give them the opportunity to exercise their data subject rights. These rights enable individuals to access the personal data organisations store on them and to challenge the way their information is used. appeared first on IT Governance Blog.

GDPR 110

GDPR Privacy Retail Personal data 110

IBM Big Data Hub

JULY 7, 2023

Data protection and data privacy Data protection , defined as protecting important information from corruption, damage or loss, is critical because data breaches resulting from cyberattacks can include personally identifiable information (PII), health information, financial information, intellectual property and other personal data.

Security 40

Security Data breaches Data Privacy Compliance 40

eDiscovery Daily

JANUARY 10, 2024

Data Privacy Restrictions Will Increase With the growing awareness and importance of data privacy, governments and corporations will encounter more stringent regulations globally. The General Data Protection Regulation (GDPR) is an early example of this. Laws within nations are evolving as well.

Blockchain 73

Blockchain Artificial Intelligence Cloud Compliance 73

Data Protection Report

MARCH 8, 2021

Importantly, note the new law’s definition of consumer : “a natural person who is a resident of the Commonwealth acting only in an individual or household context. institution of higher education. Such data security practices shall be appropriate to the volume and nature of the personal data at issue.”.

Personal data 64

Personal data GDPR Healthcare Sales 64

Data Protection Report

JANUARY 4, 2024

a. Which one does NOT require a minimum number of residents’ personal data for the “controller” to be in-scope for the law? See SEC, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure, 88 Fed. The Utah Consumer Privacy Act, available at [link] 10.a. b (within 2 hours). all of the above).

Privacy 111

Privacy Cybersecurity Artificial Intelligence e-Discovery 111

IT Governance

SEPTEMBER 1, 2021

If you find yourself facing a cyber security disaster, IT Governance is here to help. In other news… Wawa customers win initial settlement approval in data breach lawsuit Waikato DHB wins injunction to stop Radio NZ using hacked data. Travel and medical insurance provider guard.me

Data breaches 140

Data breaches Ransomware Insurance Data migration 140

IT Governance

JANUARY 30, 2019

Data protection under the GDPR looks like this: there are data subjects (that’s individuals like you and me), and we own our own personal data. The GDPR provides EU residents with eight data subject rights , and everybody needs to be aware of them to make sure that organisations are collecting our data legally.

GDPR 86

GDPR Compliance Personal data Data breaches 86

Hunton Privacy

OCTOBER 18, 2016

Recently, the Centre for Information Policy Leadership (“CIPL”) at Hunton & Williams LLP, a privacy and information policy think tank based in Brussels, London and Washington, D.C., and Telefónica, one of the largest telecommunications company in the world, issued a joint white paper on Reframing Data Transparency (the “white paper”).

Paper 49

Paper Education Privacy Personal data 49

Hunton Privacy

JULY 10, 2012

Training about personal data protection by world and European experts. The Commissioner organized this US expert’s visit in cooperation and with the assistance of the USAID with the aim of providing much needed, continuous and quality education of our staff about many ongoing data protection issues.

Education 40

Education Personal data Military Government 40

Hunton Privacy

JULY 23, 2012

Lisa Sotto , partner and head of the Global Privacy and Data Security Practice at Hunton & Williams, was interviewed on July 18, 2012 about her participation in the USAID-funded Judicial Reform and Government Accountability Project’s initiative to educate and provide data protection awareness to the Serbian government.

Data Privacy 40

Data Privacy Education Personal data Privacy 40

Preservica

MAY 16, 2018

Digital transformation is a major focus for Australian cultural, commercial and government organizations. Preservica’s recently announced GDPR enhancements will also enable Australian organizations to meet long-term data privacy obligations for personal data held on European citizens. Visit: www.preservica.com.

Digital preservation 40

Digital preservation Cloud Libraries Archiving 40

IT Governance

AUGUST 6, 2018

Welcome to the new education sector blog series. In our first blog ( sign up to the series here ) , we explore data breaches. In education, losing information – either on paper or unencrypted devices and cyber incidents follow closely as does a failure to redact data with breaches in general seeing a 32% rise across the sector. .

Data breaches 67

Data breaches Education GDPR Risk 67

IT Governance

DECEMBER 6, 2023

It’s possible that you now need to appoint a DPO (data protection officer) or data privacy lead to be the single point of contact for questions, concerns, breaches, impact assessments or communication with the regulatory authorities. You can design your data privacy systems such that they meet all these legal requirements.

Data Privacy 59

Data Privacy Privacy GDPR IT 59

IT Governance

MARCH 11, 2024

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Glosbe did not reply, but the open instance was soon closed.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

eDiscovery Daily

DECEMBER 3, 2017

In 1980, in an effort to create a comprehensive data protection system throughout Europe, the Organization for Economic Cooperation and Development (OECD) issued its “Recommendations of the Council Concerning Guidelines Governing the Protection of Privacy and Trans-Border Flows of Personal Data.”.

GDPR 44

GDPR IT Personal data Privacy 44

eDiscovery Daily

SEPTEMBER 18, 2018

As I noted a couple of months ago, 2018 is certainly on its way to becoming the year of data privacy rights for the individual and, back then, California passed a new data privacy law which will give consumers several rights regarding their personal data (though the California AG doesn’t seem thrilled about it).

IoT 35

IoT Cybersecurity Data Privacy Privacy 35

Hunton Privacy

SEPTEMBER 21, 2012

Sotto, who is renowned in the global privacy legal community, was appointed by Secretary Napolitano as Chair of the U.S. Department of Homeland Security’s Data Privacy and Integrity Advisory Committee. Earlier this year, she was invited to Belgrade to advise Rodoljub Šabi?

Privacy 40

Privacy Data Privacy Education Personal data 40

IT Governance

JANUARY 23, 2024

Source (New) Real estate USA Yes 46,906 Hampton-Newport News Community Services Board Source 1 ; source 2 ; source 3 (New) Healthcare USA Yes 44,312 Air Methods Source 1 ; source 2 (New) Healthcare USA Yes 34,016 GREYHOURS Source (New) Retail France Yes 18,700 Groveport Madison Schools Source 1 ; source 2 ; source 3 (Update) Education USA Yes 15.5

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Compromised information includes patients’ personal data, health and medical records, financial data, internal emails and software source code. Data breached: 5 TB.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

Data Matters

NOVEMBER 4, 2020

The law says little else about automated decision-making rights other than to direct that regulations be issued governing these opt-out and access rights. Businesses familiar with GDPR will recognize the reference to automated decision-making, as Article 22 gives data subjects similar opt-out rights. New Enforcement Agency.

Privacy 122

Privacy B2B Sales Data breaches 122

eDiscovery Daily

JANUARY 30, 2018

Discussion points will include how to adequately understand the technology from a governance and controls point of view to be able to withstand regulatory scrutiny. The panel will also review how professionals are integrating big data and machine learning in e-discovery, compliance, and regulatory matters.

e-Discovery 34

e-Discovery Artificial Intelligence GDPR Education 34

IT Governance

MARCH 5, 2024

Source (New) Energy Canada Yes 1 TB AB Texel Source (New) Transport Netherlands Yes 1 TB STOCK Development Source (New) Real estate USA Yes 1 TB Centre Hospitalier d’Armentières Source 1 ; source 2 (Update) Healthcare France Yes >900,000 INSS Source (New) Public Brazil Yes 879,492 bienDIG Source (New) Software Mexico Yes 450,000 Grand Avignon (..)

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

JANUARY 30, 2024

Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 750 million victims’ personal data. Source (New) Non-profit USA Yes 25,908.62

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52