article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S. Location Matters.

article thumbnail

The G7 expresses its concern over ransomware attacks

Security Affairs

Cyber threats cause significant economic damage and threaten customer protection and data privacy. Experts are observing a significant increase in the number of Ransomware attacks against hospitals, financial institutions, schools, and other critical infrastructure in G7 countries. ” continues the statement.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Developments in Health Privacy and Cybersecurity Policy and Regulation: OCR Issues Cybersecurity Warnings and New Health Data Legislation Is Introduced

Data Matters

implement a privileged access management (PAM) system that is reasonable and appropriate to reduce the risk of unauthorized access to privileged accounts pursuant to the HIPAA Privacy Rule. Companies can track developments on the bill here and evaluate their own health care data privacy and cybersecurity risks and compliance concerns.

article thumbnail

NYDFS settles with EyeMed for $4.5 million

Data Protection Report

On October 18, 2022, the New York Department of Financial Services announced a settlement with EyeMed, a licensed life, accident, and health insurer, with respect to a security incident that occurred in 2020. Those emails came to the attention of EyeMed’s IT department and also its customers, who complained.

article thumbnail

The Week in Cyber Security and Data Privacy: 4 – 10 December 2023

IT Governance

According to the decision , fines can be issued to data controllers when GDPR infringements are “committed wrongfully, that is to say, intentionally or negligently”. A criminal hacker gained access to Lafourche Medical Group’s Microsoft 365 environment following a phishing attack that impersonated one of the medical group’s owners.

article thumbnail

Top GRC Tools & Software for 2021

eSecurity Planet

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. See our in-depth look at RSA Archer. LogicManager.

article thumbnail

Top 10 Governance, Risk and Compliance (GRC) Vendors

eSecurity Planet

Data privacy regulations like the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) can be hard to navigate for businesses of any size, but GRC tools can simplify and streamline compliance with all of the requirements. See our in-depth look at RSA Archer. LogicManager.