Data Breach Today

APRIL 22, 2024

Attorney Rachel Rose on Navigating the Intensifying Scrutiny of Federal Regulators The federal government is cracking down on healthcare fraud in all forms including kickbacks, lapses in cybersecurity and privacy, lack of fairness in Medicare Advantage policies, and inflated pharmacy claims.

Compliance 283

Compliance Privacy Cybersecurity Government 283

Data Matters

MARCH 28, 2022

OCR’s reminders and recommendations for regulated entities include to: assess and reduce risks and vulnerabilities to the availability of ePHI, which is defined as “the property that data or information is accessible and useable upon demand by an authorized person” pursuant to the HIPAA Security Rule. 45 CFR 164.308(a)(5)(i).

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

Data Matters

APRIL 11, 2024

The newest editions of the Chambers Global Practice Guides have been published and, once again, Sidley lawyers have contributed to two guides: Data Protection & Privacy 2024 and Cybersecurity 2024. Sidley partner Alan Charles Raul is a contributing editor to both guides in addition to authoring the introductions.

Privacy 88

Privacy Cybersecurity Artificial Intelligence Data Privacy 88

Threatpost

JANUARY 12, 2021

WhatsApp aimed to clear the air about its updated privacy policy after reports of mandatory data sharing with Facebook drove users to Signal and Telegram in troves.

Privacy 78

Privacy IT Security 78

KnowBe4

JANUARY 3, 2021

The post How to Decode Privacy Policies: A Primer appeared first on MediaPRO.

Privacy 101

Privacy Personal data Data Privacy 101

The Last Watchdog

NOVEMBER 8, 2021

However, healthcare data ranks at the top of the list for needing improvements in security and privacy protections. This data is managed by different entities, such as primary care facilities, acute care facilities and within associated applications that collect, store and track health data, creating numerous exposure vulnerabilities.

Access 349

Access Privacy Security IoT 349

Schneier on Security

MARCH 14, 2024

Some drivers may not realize that, if they turn on these features, the car companies then give information about how they drive to data brokers like LexisNexis [who then sell it to insurance companies].

Insurance 127

Insurance Privacy Access IT 127

Hunton Privacy

APRIL 23, 2019

On April 17, 2019, the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (the “Dutch DPA”) issued six recommendations (in Dutch) for companies, to be taken into account when drafting privacy policies. The published recommendations follow the Dutch DPA’s investigation of companies’ privacy policies.

Privacy 77

Privacy Personal data GDPR IT 77

The Last Watchdog

JANUARY 9, 2023

As the world becomes more digital and connected, it is no surprise that data privacy and security is a growing concern for small to medium sized businesses — SMBs. Related: GDPR sets new course for data privacy. Let’s look at some of the challenges faced by SMBs in today’s data privacy landscape.

Data Privacy 210

Data Privacy Compliance Privacy GDPR 210

Threatpost

AUGUST 29, 2019

In an open letter, the Mozilla Foundation and EFF scolded Venmo for its data privacy policies, which they say could open the door to stalking and spear-phishing.

Privacy 72

Privacy Data Privacy Phishing IT 72

Hunton Privacy

SEPTEMBER 20, 2018

announced a June update to its App Store Review Guidelines that will require each developer to provide its privacy policy as part of the app review process, and to include in such policy specific content requirements. Developers only will be able to edit an app’s privacy policy when submitting a new version of the app.

Privacy 85

Privacy Data collection IT 85

Data Breach Today

JANUARY 13, 2023

Agency Says the Company's Policies Violated National Data Protection Law TikTok must pay a fine of 5 million euros to the French government after the country's data protection agency said the short-form video app violated national privacy law restricting the monitoring of web browser activity.

Privacy 238

Privacy Government 238

Data Breach Today

OCTOBER 6, 2023

Also: EU Policy Updates and the Disconnect Between CEOs and CISOs In the latest weekly update, ISMG editors examine policies in the U.S.

Government 282

Government Cybersecurity Privacy Security 282

Weissman's World

FEBRUARY 8, 2023

It’s no secret that infogov and records management can be difficult and frustrating – increasingly so as traditional areas like policy development, process improvement, compliance, retention, and destruction have begun banging into once-separate and quickly growing disciplines like privacy and security.

Information governance 156

Information governance Government Records Management Compliance 156

Security Affairs

SEPTEMBER 4, 2023

The social media site X announced that it will collect premium users’ biometric data for security and identification purposes. The social media platform X (formerly known as Twitter) has updated its privacy policy informing its premium users that the company will collect their biometric data to curb fraud and prevent impersonation.

IT 126

IT Privacy Education Government 126

Data Breach Today

OCTOBER 23, 2023

HHS OCR Guides Spotlight Sanctions for Insiders; Telehealth Privacy, Security Risks Federal regulators issued new guidance materials for HIPAA-regulated entities, including a document stressing the importance of sanction policies for workforce members who violate HIPAA, plus two new resources for healthcare providers and patients regarding telehealth (..)

Privacy 278

Privacy Risk Security 278

WIRED Threat Level

JULY 6, 2023

Here’s more context on what personal data is collected by Threads and similar social media apps. Want to try out Meta’s new social media app?

Privacy 101

Privacy Personal data IT Security 101

Data Protection Report

APRIL 30, 2024

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy.

Personal data 85

Personal data Privacy Information governance Compliance 85

IT Governance

FEBRUARY 16, 2024

He’s also an award-winning author, and has been involved in developing a wide range of information security and data privacy training courses, has consulted for clients across the globe, and is a regular media commentator and speaker. We sat down to chat to him about industry challenges in 2024.

Data Privacy 117

Data Privacy GDPR Compliance Privacy 117

The Guardian Data Protection

JULY 4, 2018

Consumer group says policies of Facebook, Amazon and Google are vague and unclear Privacy policies from companies including Facebook, Google and Amazon don’t fully meet the requirements of GDPR, according to the pan-European consumer group BEUC.

GDPR 94

GDPR Privacy IT 94

Collibra

MAY 7, 2024

While Data Citizens ‘24 was filled with engaging sessions and content, more importantly, it brought together our community of data and AI professionals to learn and connect with one another. GenAI (like ChatGPT and other solutions) has kicked off a tidal wave of AI interest and projects.

Government 90

Government Risk Privacy Metadata 90

eSecurity Planet

APRIL 12, 2024

Data loss prevention (DLP) best practices are principles that help prevent intentional or unintentional data erasure. By following these guidelines, organizations can reduce the detrimental impact of data loss and quickly resume operations after an incident. Proofpoint’s 2024 data loss landscape report reveals 84.7%

Encryption 124

Encryption Risk Data breaches Access 124

Schneier on Security

JULY 12, 2023

No surprise, but Google just changed its privacy policy to reflect broader uses of all the surveillance data it has captured over the years: Research and development : Google uses information to improve our services and to develop new products, features and technologies that benefit our users and the public.

IT 91

IT Privacy Cloud Data collection 91

Hunton Privacy

MAY 11, 2023

4 , also known as the Texas Data Privacy and Security Act (“TDPSA”). If the TDPSA is signed into law, Texas could become the tenth state to enact comprehensive privacy legislation. On May 10, 2023, the Texas Senate passed H.B. The TDPSA now heads to Texas Governor Greg Abbott for a final signature.

Data Privacy 128

Data Privacy Privacy Security Personal data 128

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S.

Data Privacy 142

Data Privacy Compliance Privacy Security 142

Hunton Privacy

AUGUST 15, 2022

On June 10, 2022, New York became the first state to require attorneys to complete at least one credit of cybersecurity, privacy and data protection training as part of their continuing legal education (“CLE”) requirements. The new requirement will take effect July 1, 2023.

Cybersecurity 114

Cybersecurity Privacy Data Privacy Data breaches 114

Collibra

JANUARY 30, 2024

Your cloud journey is also an opportunity for your organization to redefine your approach to data. But what should you look for when evaluating data intelligence solutions? But what should you look for when evaluating data intelligence solutions? So are your workflows.

Cloud 82

Cloud Compliance Government Access 82

IG Guru

OCTOBER 3, 2019

by Megan Smalley Data privacy enforcement is becoming a top risk that companies must consider as part of their enterprise risk management frameworks. Ever since the European Union’s General Data Protection Regulation (GDPR) passed in May 2018, more data protection laws have been proposed around the world.

Data Privacy 40

Data Privacy Privacy GDPR Risk 40

Data Protection Report

MARCH 6, 2023

The reform of Hong Kong’s Personal Data (Privacy) Ordinance (Cap.486) According to a recent briefing to the Legislative Council, the Privacy Commissioner for Personal Data (the PCPD ) reported that she is working closely with the government to comprehensively review the PDPO to formulate concrete proposals for legislative amendments.

Data Privacy 136

Data Privacy Privacy Paper Personal data 136

The Last Watchdog

APRIL 1, 2024

Related: Data privacy vs data security However, this remains a novel concept at most companies. The report, titled “ Embed Cybersecurity And Privacy Everywhere To Secure Your Brand And Business ,” argues for a paradigm shift. Our research and data on consumer trust have proven this.

Cybersecurity 235

Cybersecurity Privacy B2B Risk 235

Security Affairs

JANUARY 29, 2024

National Security Agency (NSA) admitted to buying internet browsing records from data brokers to monitor Americans’ activity online without a court order. The data acquired by the intelligence agency can reveal the websites visited by the US citizens and what apps they use. Senator Ron Wyden, D-Ore.,

Metadata 118

Metadata Sales Personal data Privacy 118

Data Matters

JULY 13, 2023

The post FTC’s New Biometric Policy Statement Articulates New Governance Standards and an Expansive View of Biometric Data appeared first on Data Matters Privacy Blog.

Government 148

Government Risk Compliance Privacy 148

Data Breach Today

JULY 26, 2021

Uber Must Tighten Data Handling, Regulator Says Australia's data regulator has found that Uber interfered with the privacy of 1.2 million of its customers as a result of a 2016 global data breach. Uber says it's made improvements to its systems and its internal security policies.

Privacy 291

Privacy Data breaches Security IT 291

Hunton Privacy

OCTOBER 26, 2022

On October 20, 2022, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth published a white paper entitled Protecting Children’s Data Privacy, Policy Paper I, International Issues and Compliance Challenges. Policy Paper I sets the stage for a second policy paper in 2023?Protecting

Paper 96

Paper Data Privacy Privacy Compliance 96

The Last Watchdog

JUNE 12, 2023

Information privacy and information security are two different things. Related: Tapping hidden pools of security talent Information privacy is the ability to control who (or what) can view or access information that is collected about you or your customers. They take all this private information, and then they sell it.

Information Security 202

Information Security Privacy Security Data breaches 202

Krebs on Security

FEBRUARY 28, 2020

Federal Communications Commission (FCC) today proposed fines of more than $200 million against the nation’s four largest wireless carriers for selling access to their customers’ location information without taking adequate precautions to prevent unauthorized access to that data. ” Sen. Ron Wyden (D-Ore.),

Privacy 299

Privacy Communications Access IT 299

Data Breach Today

DECEMBER 4, 2020

Million Fine for French Supermarket Giant Carrefour for Alleged GDPR Violations France's privacy regulator has hit retail giant Carrefour with a $3.7 million fine for violating privacy laws, including GDPR.

Privacy 292

Privacy Retail GDPR IT 292