ForAllSecure

MAY 26, 2020

Two CVEs: CVE-2020-11104 and CVE-2020-11105. They were both reported in March 2020 to the cereal developers as part of our responsible disclosure. We also reported these in March 2020 to the cereal developers, and it’s still unclear which ones are just bugs and which might represent vulnerabilities.

Libraries 52

Libraries Archiving IT Education 52

DLA Piper Privacy Matters

JULY 21, 2020

The Irish Court of Appeal has clarified the scope of the definition of personal data – noting that, while the definition is deliberately very broad, it does not facilitate access by an individual to reports stemming from a complaint for the sole reason that the complaint was made by that individual. Background .

Personal data 99

Personal data Access Compliance Privacy 99

Data Protection Report

JANUARY 20, 2020

2019 saw continued growth and change in data protection and cyber-security across the Asia-Pacific. Following the implementation of the GDPR in May, 2018, many jurisdictions moved to review and strengthen existing data privacy and cyber-security laws. Data localisation requirements are also imposed on foreign service providers.

Personal data 128

Personal data Security Data Privacy GDPR 128

HL Chronicle of Data Protection

MARCH 5, 2020

On January 17, The Belgian Data Protection Authority (DPA) published Recommendation no 01/2020 providing Guidance on direct marketing. The Recommendation provides a methodology on how to comply with the General Data Protection Regulation (GDPR) when conducting direct marketing. Definition of Direct Marketing.

Marketing 59

Marketing GDPR Personal data Healthcare 59

DLA Piper Privacy Matters

NOVEMBER 16, 2020

As the business community takes stock of (and impatiently waits for) 2020 election results, it should place particular significance on the passage of Proposition 24, the California Privacy Rights Act (CPRA) by about a 12 percent margin. The CPRA introduces key new definitions that focus on digital advertising and sensitive data.

Privacy 84

Privacy Unstructured data B2B Sales 84

Data Protection Report

JANUARY 13, 2020

A few companies simply included CCPA’s broad definition of sale in the privacy policy and stated that under CCPA’s definition, “a sale may or may not have occurred.”. We encourage you to review our data protection report blogs and contact us on how to help your business become CCPA compliant. Ballot Initiative.

Privacy 40

Privacy B2B Sales Compliance 40

Data Matters

MARCH 29, 2022

The OAG’s position in this regard expressly rejects Assemblyman Kiley’s argument to the contrary, that internally-generated inferences are not collected “from” a consumer and, therefore, should not be among the types of data that can be provided in response to a data subject request. Opinion at 12. Opinion at 12.

Privacy 88

Privacy IT Government 88

eDiscovery Daily

JANUARY 27, 2020

: o ) Next week during the show, I’ll cover the main conference sessions each day that relate to eDiscovery, Information Governance, Cybersecurity and Data Privacy to give you a complete sense of options. 11:00am – 12:00pm: Mobile Data: Issues in Data Privacy and Data Protection.

e-Discovery 50

e-Discovery Data Privacy Blockchain Education 50

Data Matters

SEPTEMBER 7, 2022

In parallel with its development of the new model, the Privacy Working Group is continuing to draft a white paper on data ownership and use rights. 5R) — to address new concepts included in the Financial Accounting Standards Board (FASB) revisions to the definition of an “asset” and a “liability.” 26R — Bonds (SSAP No. 4) and SSAP No.

Insurance 78

Insurance Paper Privacy Risk 78

IBM Big Data Hub

MAY 6, 2024

In 2022, less than 10% of trial participants for FDA approval were Black, fewer than 12% were Asian, under 13% were Hispanic, and women constituted less than 50% (Exhibit 3), not reflective of the current US population. The FDA’s 2020 guidance emphasized expanding eligibility criteria and reducing unnecessary exclusions.

Computer and Electronics 80

Computer and Electronics Healthcare Artificial Intelligence Marketing 80

DLA Piper Privacy Matters

SEPTEMBER 6, 2021

On 2 September 2021, the Data Protection Commission (DPC) announced it has imposed a €225 million administrative fine against WhatsApp Ireland Limited , as well as a reprimand and an order to bring its processing into compliance. Non-User Data. WhatsApp has announced its intention to appeal the decision. Background. The Decision.

GDPR 105

GDPR Personal data e-Delivery Communications 105

Data Matters

SEPTEMBER 20, 2021

Moody’s Analytics, in collaboration with the American Council of Life Insurers, developed the revised bond factors, which are based on more recent historical data, as the data on which the prior factors were based was approximately 30 years old.

Insurance 88

Insurance e-Delivery Paper Sales 88

Reltio

JANUARY 23, 2020

PwC surveyed a sample of 15,000 people from 12 countries. Connected customer data from many sources is required to make this happen. A common one has been master data management (MDM). . The Gartner Magic Quadrant for Master Data Management Solutions, 2020 was just published. Clean data is important.

Customer Experience 71

Customer Experience MDM Healthcare Marketing 71

eDiscovery Daily

OCTOBER 21, 2021

But what exactly is the definition of an IoT device? IoT is shorthand for the Internet of Things, a term used to describe physical objects that transmit data through wireless networks. [1] Four years ago in Arkansas, data from an Amazon Echo was used to investigate the death of Victor Collins. IoT Devices in Court. Conclusion.

IoT 74

IoT e-Discovery Insurance Access 74

DLA Piper Privacy Matters

SEPTEMBER 2, 2021

The Code seeks to regulate the provision of online services to children, providing influential guidance to businesses regarding how to build such services in a way that complies with UK data protection law. The Children’s Code is not new law, but a statutory Code of Practice under the Data Protection Act 2018. Background.

Privacy 103

Privacy Education Personal data Compliance 103

Data Protection Report

JULY 7, 2020

On July 6, 2020, the U.S. 19–631 (July 6, 2020) (2020 WL 3633780).) 02-278 (Declaratory Ruling) (June 25 2020).). Courts are continuing to struggle with this definition, and there is a split among the Circuit Courts of Appeal. American Association of Political Consultants , No. Background – the law.

Government 59

Government Communications IT Privacy 59

Data Protection Report

JULY 12, 2022

In brief, on April 5, 2021, a security researcher contacted Wegmans about a serious flaw the left some of Wegmans’ customers’ personal data available to the public. Wegmans updated the container configurations to prohibit public access on May 12, 2021 and notified consumers. Wegmans does not confirm or deny the NYAG’s findings.

Passwords 105

Passwords Data collection Personal data Cloud 105

Data Protection Report

JULY 16, 2019

In a 12-hour marathon hearing, the California Senate Judiciary Committee on July 9, 2019, debated, struck down, scaled back and put back on the negotiating table key amendments to the California Consumer Privacy Act (“CCPA”). The private right of action for data breaches, however, will continue to apply to employee data.

Privacy 40

Privacy B2B Data breaches Data collection 40

Hunton Privacy

MARCH 26, 2020

On March 12, 2020, the Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth LLP submitted formal comments to the Office of the Privacy Commissioner of Canada (“OPC”) in response to its proposals for ensuring appropriate regulation of artificial intelligence (“AI”).

Privacy 68

Privacy Artificial Intelligence Risk Compliance 68

eDiscovery Daily

FEBRUARY 3, 2020

There are several interesting sessions today related to eDiscovery, Information Governance, Cybersecurity and Data Privacy. I’ve opened them all up, so you don’t have to. : o ) Sessions in the main conference tracks include: 11:30am – 12:30pm: Getting Into the BlockTech Game. The post Welcome to Legaltech New York 2020!:

Education 53

Education Data Privacy GDPR Compliance 53

Hunton Privacy

NOVEMBER 18, 2020

On November 12, 2020, Chief Judge Nancy J. The Judge concluded that, at this point in the litigation, questions of fact remained as to the data collected by the facial recognition technology and it is not yet clear whether BIPA applies. Rosenstengel of the U.S.

Data collection 62

Data collection Privacy IT Information Security 62

eSecurity Planet

MAY 27, 2021

Cyber insurance premiums have jumped about 12 percent between the beginning of 2018 and the end of 2020. According to a report by credit-rating organization Fitch Ratings, cyber insurance premiums in the United States rose 22 percent year-over-year in 2020, to almost $3 billion. Insurers Assessing Risks.

Insurance 128

Insurance Ransomware Risk Data science 128

Security Affairs

DECEMBER 27, 2021

Torrez Market was established in April 2020, it is the only darknet marketplace that accepts Bitcoin, Monero, Zcash and Litecoin. The marketplace focuses on the sale of narcotics, but its listing also included other illegal products and services such as data dumps and counterfeiting. We also share our vendor’s data with Recon.

Marketing 90

Marketing Phishing Sales Passwords 90

Hunton Privacy

JANUARY 22, 2020

On January 21, 2020, the UK Information Commissioner’s Office (“ICO”) published the final version of its Age Appropriate Design Code (“the code”), which sets out the standards that online services need to meet in order to protect children’s privacy. The code will now be laid before Parliament for approval.

IT 54

IT Personal data Compliance Privacy 54

Data Matters

APRIL 20, 2020

Case: WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12. The fact that the employer had given the employee access to the payroll data, as an internal IT auditor, was not sufficient in itself to impose vicarious liability on the employer under the Data Protection Act 1998 (DPA) (now repealed).

Data breaches 68

Data breaches GDPR Privacy IT 68

HL Chronicle of Data Protection

OCTOBER 26, 2018

The application of the California Consumer Protection Act of 2018 (“CCPA”) to employee data has been the subject of much debate since the first version of the bill was introduced on June 21, 2018 (just days prior to its enactment on June 28). Under a plain language reading of the CCPA, the law likely applies to employee data.

Privacy 40

Privacy Sales Compliance Personal data 40

Data Protection Report

AUGUST 29, 2019

Given that January 1, 2020 is almost upon us and July 2020 follows close behind, there simply will not be enough time once the amendments are passed and the guidance provided, to implement CCPA if you do not start now (or ideally, have started already). Where is that data located? See our previous posts, linked below.).

Privacy 40

Privacy Compliance Risk GDPR 40

HL Chronicle of Data Protection

FEBRUARY 25, 2019

The groundbreaking California Consumer Privacy Act (CCPA) takes effect on January 1, 2020, and many key questions are still unresolved. We are hosting two events on the CCPA, one on March 12 in Los Angeles and another on March 13 in San Francisco. March 12 – 10:00 a.m. – 2:00 p.m. Hogan Lovells Los Angeles.

Sales 40

Sales Privacy Cybersecurity 40

DLA Piper Privacy Matters

MAY 11, 2020

On May 4, the Californians for Consumer Privacy, led by founder Alastair Mactaggart, announced its submission to qualify the California Privacy Rights Act for the November 2020 ballot. 1, 2023, and move California privacy law a bit further in the direction of the EU General Data Protection Regulation.

Privacy 52

Privacy Unstructured data Access Data collection 52

Data Protection Report

JANUARY 31, 2019

On January 25, 2019, the California Attorney General’s Office held a public forum in Los Angeles to solicit feedback on the California Consumer Privacy Act of 2018 (“CCPA”) as it prepares to draft regulations which must be adopted on or before July 1, 2020. Article #3: CCPA definition of personal information.

Sales 40

Sales Privacy Compliance GDPR 40

Data Protection Report

SEPTEMBER 17, 2019

Executive Summary : The wait is over: Only five CCPA amendments with limited scope get passed by the California legislature, leaving the CCPA largely intact to go into effect on January 1, 2020. This will be the version that will go into effect on January 1, 2020. Summary of CCPA Amendments. – § 1798.100.

B2B 40

B2B Privacy Communications Encryption 40

Data Protection Report

AUGUST 12, 2019

On August 12, the California legislature returns after its summer recess. The California Senate Appropriations Committee is holding a hearing on August 12 regarding the following seven CCPA proposed amendments. Here is a summary of each that were scheduled to be on the calendar as of August 12. .

Manufacturing 40

Manufacturing Sales Privacy Data Privacy 40

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

The CCPA goes into effect January 1, 2020. Below is a history of the CCPA, a summary of its key elements as adopted, including recently adopted technical amendments, and practical takeaways for covered entities as the law moves from passage to 2020 enforcement. The CCPA’s definition of “consumer” is equally broad. 17-0039).

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

The CCPA goes into effect January 1, 2020. Below is a history of the CCPA, a summary of its key elements as adopted, including recently adopted technical amendments, and practical takeaways for covered entities as the law moves from passage to 2020 enforcement. The CCPA’s definition of “consumer” is equally broad. 17-0039).

Privacy 58

Privacy Sales Education Compliance 58

Adam Levin

DECEMBER 16, 2020

If 2020 taught us anything, it’s to expect the unexpected–and do the best we can in a rapidly changing world. But never use a “free” VPN: When you use a free VPN provider, you are trading the potential problem that your data is being intercepted and collected for a guarantee that it is being intercepted.

e-Delivery 98

e-Delivery Passwords Data breaches Phishing 98

HL Chronicle of Data Protection

MAY 26, 2020

The California Privacy Rights Act (CPRA) is progressing through California’s elections process for inclusion on the November 2020 ballot. Businesses may want to begin considering how their data privacy obligations in California may change if voters enact CPRA. Transparency and Data Governance. Data Minimization (new).

Privacy 66

Privacy Compliance Sales Data Privacy 66

Data Matters

MARCH 10, 2021

It tackles a number of important issues such as the confidentiality of communications, the processing of traffic and location data, unsolicited communications and direct marketing, and cookie requirements. The GDPR also supplements the ePrivacy rules on the protection of personal data.

GDPR 68

GDPR Metadata Communications Privacy 68