Data Protection Report

FEBRUARY 2, 2024

On January 17, 2024 the New York Department of Financial Services (“NYDFS”) published a Proposed Insurance Circular Letter (“Proposed Circular”) regarding the use of artificial intelligence systems (“AIS”) and external consumer data and information sources (“ECDIS”) in insurance underwriting and pricing.

Insurance 76

Insurance Artificial Intelligence Risk Compliance 76

ARMA International

APRIL 18, 2022

It is essential that your organization’s records retention schedule is compliant with the data protection requirements in the jurisdictions where your organization operates. Definition and Purpose of a Records Retention Schedule. Introduction to Data Protection Laws. Understanding the Changes.

Personal data 100

Personal data GDPR Privacy Records Management 100

erwin

JANUARY 7, 2021

Our predictions for 2021 are rooted in what we’ve learned from the past year and the relevance of data in getting us to where we are and where we need to go. Historically, moving legacy data to the cloud hasn’t been easy or fast. However, that definition is too narrow in terms of AI’s relation to data governance.

Metadata 98

Metadata Artificial Intelligence Compliance Government 98

Hunton Privacy

JULY 5, 2023

On June 28, 2023, the New York Department of Financial Services (“NYDFS”) published an updated proposed Second Amendment (“Amendment”) to its Cybersecurity Regulation, 23 NYCRR Part 500. As described below, senior governing bodies would have new oversight responsibilities under the amendments.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

Data Matters

APRIL 11, 2022

The concept of “important data” is a cornerstone of China’s data regulatory regime. The Cyber Security Law (2017) (the CSL ) prohibits operators of critical information infrastructures ( CIIs ) from transferring their “important data” and personal information outside of China. Then, what are “important data”?

Military 88

Military Artificial Intelligence Security Financial Services 88

Data Protection Report

NOVEMBER 2, 2023

On November 1, 2023, the New York Department of Financial Services (NYDFS) finalized the second amendment to its cybersecurity regulations, which are available here. The two definitions from Section 500.1 a)), this new term applies. NYDFS stated: The Department has revised the language of § 500.17(a)

Cybersecurity 104

Cybersecurity Compliance Financial Services Government 104

Krebs on Security

JANUARY 25, 2022

Then in mid-January, Jim heard from MSF via snail mail that they’d discovered a data breach. MSF said the personal information involved in this incident may have included name, date of birth, government-issued identification numbers (e.g., 14, 2022 breach notification letter from tribal lender Mountain Summit Financial. .”

Financial Services 209

Financial Services IT Data breaches Authentication 209

The Last Watchdog

APRIL 3, 2019

Identity governance and administration, or IGA , has suddenly become a front-burner matter at many enterprises. Related: Identity governance issues in the age of digital transformation. I had the chance at RSA 2019 to visit with Mike Kiser, global strategist at SailPoint , an Austin, TX-based supplier of IGA services to discuss this.

Digital transformation 104

Digital transformation Insurance Compliance Healthcare 104

Data Matters

AUGUST 5, 2019

On July 25, 2019, Governor Cuomo signed the two bills into law, one which amended the state’s data breach notification law, and another that created additional obligations for data breaches at credit reporting agencies. The Stop Hacks and Improve Electronic Data Security Act.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

DLA Piper Privacy Matters

AUGUST 23, 2021

Rather than bringing substantial changes to the existing China data privacy framework, the PIPL helpfully consolidates and clarifies obligations on processing of personal information at a national law level. To be clear, this is not China’s own GDPR.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Data Matters

FEBRUARY 12, 2019

The CCPA was written and enacted with extraordinary speed, as legislators felt the need to move quickly in order to preempt a data privacy ballot initiative that had received enough signatures to be placed on California’s November ballot. Definition of Unique Identifiers. Updating as needed the definition of unique identifiers.

Sales 74

Sales Privacy Data Privacy Compliance 74

erwin

MAY 2, 2019

Enterprise architect is a common job title within IT organizations at large companies, but the term lacks any standard definition. That’s one of the reasons the enterprise architect role has no standard definition. And that’s where an enterprise architect in the role of an internal consultant comes into play.

Digital transformation 95

Digital transformation Healthcare Compliance Cloud 95

IT Governance

NOVEMBER 9, 2018

In addition to data subjects’ rights to be informed, of access, to rectification, to erasure, to restrict processing, to data portability and to object, the EU’s GDPR (General Data Protection Regulation) sets out requirements relating to automated individual decision-making, including profiling. What is profiling under the GDPR?

GDPR 88

GDPR Personal data Financial Services Compliance 88

Collibra

NOVEMBER 3, 2020

It’s no longer sufficient to think in terms of data management. For banks to ensure preparation for CCAR MRA and sustainable regulatory compliance, they need to shift their thinking to focus on data governance, which requires a different set of capabilities. CCAR MRAs and governance capabilities .

Metadata 45

Metadata Government Compliance Financial Services 45

IBM Big Data Hub

JUNE 26, 2023

One of the few pre-scripted questions I ask in most of the episodes is about the guest’s definition of “hybrid cloud.” It isn’t a surprise that so many of the guests on my podcast work on topics and technologies directly related to cloud. ” The answers have all been comparable.

Cloud 60

Cloud Financial Services IT Government 60

DLA Piper Privacy Matters

JULY 30, 2019

A data breach, that is. It’s your service provider’s breach, but it involves your (more likely, your customer’s) data. Service provider cyber incidents have exploded in volume, type, frequency, response time and cost. Who “owns” a data breach?

Data breaches 45

Data breaches Cybersecurity Financial Services Risk 45

HL Chronicle of Data Protection

NOVEMBER 15, 2018

The draft text of the EU-UK withdrawal agreement was published by the UK Government and the European Union yesterday, providing some of the first concrete indicators of the possible direction of travel in the area of data protection. What constitutes personal data that is subject to the withdrawal agreement is currently unclear.

GDPR 40

GDPR Personal data Government Financial Services 40

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs.

Privacy 84

Privacy GDPR Data breaches Risk 84

HL Chronicle of Data Protection

DECEMBER 7, 2018

In such situations, a financial institution must comply with a wide array of CCPA obligations, including requirements to make certain disclosures to consumers and to provide certain rights to consumers, such as the right to stop “sales” of their personal information and the right to access data that a business has collected about them.

Privacy 40

Privacy Financial Services Compliance Data breaches 40

HL Chronicle of Data Protection

MAY 21, 2018

Circuit struck down the FCC’s 2015 interpretation of the definition of “automatic telephone dialing system” (autodialer) as overly broad, arbitrarily vague, and “utterly unreasonable.” Should contractors acting on behalf of the federal government be considered “persons” under the TCPA? In March, the D.C.

Communications 40

Communications Financial Services Privacy Government 40

Reltio

JUNE 20, 2019

Henrik Liliendahl is an MDM and PIM expert; speaker and blogger ( www.liliendahl.com and [link] ) and the Co-Founder, Chairman and CTO of Product Data Lake a product information exchange service. But that was my route into data management and going from there into MDM PIM and data governance. Kate Tickner, Reltio.

MDM 49

MDM Manufacturing Computer and Electronics Digital transformation 49

Data Protection Report

MARCH 7, 2024

China Cuba Iran North Korea Russia Venezuela What is “personally identifiable data” that is “in combination with each other”? The proposed regulation would define the term to mean any “listed identifier” that is linked to any other “listed identifier.” Note that the only difference between the two examples is the addition of IP addresses.

Access 57

Access Military Compliance Personal data 57

ARMA International

DECEMBER 26, 2019

Government topped the list of vertical industries at 23%. in 2017), with the remainder reporting into senior administrative roles, compliance, corporate services, or finance teams. in 2017), with the remainder reporting into senior administrative roles, compliance, corporate services, or finance teams.

Content services 76

Content services Cloud Records Management Privacy 76

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs.

Privacy 52

Privacy GDPR Data breaches Risk 52

Hunton Privacy

OCTOBER 17, 2012

On October 15, 2012, the Singapore Parliament passed the Personal Data Protection Act 2012. The new law will apply only to data processing in the private sector as data processing by public agencies (or organizations acting on behalf of public agencies) are already subject to internal government rules.

Personal data 45

Personal data Financial Services Data Privacy Data breaches 45

Reltio

MARCH 19, 2019

Mike Evans is CTO and Founder at Comma Group and has spent more than a decade in the business analysis, MDM and data management space. What is your background and what was your route into data management? I never consciously chose to work in data. It became apparent very quickly that a lack of focus on data was the root cause.

MDM 75

MDM Retail IT Government 75

Hunton Privacy

JANUARY 20, 2023

As financial services authorities move to regulate digital assets in jurisdictions worldwide, the paper highlights the need to bring privacy regulators into the discussion so that data privacy issues affecting blockchain are addressed in tandem. Data minimization. Data security. Accountability. Purpose limitation.

Paper 134

Paper Blockchain Privacy Financial Services 134

Hunton Privacy

MAY 13, 2011

Data Breach Notification – These provisions would establish a national data breach reporting system. The provisions are aimed at standardizing the requirements for reporting security breaches by, among other things, establishing statutory definitions of a “security breach” and “sensitive personally identifiable information.”.

Cybersecurity 40

Cybersecurity Data breaches Information Security Financial Services 40

Data Protection Report

APRIL 9, 2024

For example, government contractors or subcontractors with reporting obligations to the DOD or DOE for cyber incidents, or financial services entities that are already required to report cyber incidents to their primary federal regulator would be considered “covered entities” under the CIRCIA.

Ransomware 82

Ransomware Agriculture Cybersecurity Government 82

IBM Big Data Hub

OCTOBER 16, 2023

As the world continues to become a globally connected ecosystem, data fluidity has sparked national and international conversations around notions of data and digital sovereignty. First, we must understand how data sovereignty came to be. What is data sovereignty?

Cloud 71

Cloud Compliance Data Privacy Privacy 71

erwin

DECEMBER 17, 2020

What is Microsoft’s Common Data Model (CDM), and why is it so powerful? The same is true for data, with a number of vendors creating data models by vertical industry (financial services, healthcare, etc.) and making them commercially available to improve how organizations understand and work with their data assets.

Metadata 90

Metadata Analytics Government Financial Services 90

HL Chronicle of Data Protection

MARCH 14, 2019

The proposed Rule would allow the CISO to be an employee of a service provider or affiliate, although in that case the FI would be required to designate a senior member of its personnel to direct and oversee the CISO. Board reporting. Periodic risk assessments.

Privacy 40

Privacy Risk Cybersecurity Information Security 40

erwin

SEPTEMBER 25, 2020

Understanding the benefits of data modeling is more important than ever. Data modeling is the process of creating a data model to communicate data requirements, documenting data structures and entity types. In this post: What Is a Data Model? Why Is Data Modeling Important? What Is a Data Model?

Data structuring 111

Data structuring Cloud Metadata Financial Services 111

Collibra

MAY 16, 2022

As a principal for data quality, I enjoy taking time to work with our customer base. These organizations demonstrate perspectives and prioritization that show great promise in the industry of data. . For financial services, data governance found its roots in risk. Audit & Professional Services.

Risk 103

Risk Government Financial Services Access 103

Data Matters

AUGUST 24, 2018

NAIC Continues its Evaluation of Insurers’ Use of Big Data . The NAIC is also considering insurers’ use of big data in underwriting life insurance products. The Big Data (EX) Working Group heard a presentation from LIMRA regarding how insurers are utilizing consumer data in underwriting life insurance products.

Insurance 60

Insurance Big data e-Delivery Risk 60

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 36 million records. Data breached: 6,935,412 individuals’ data. Data breached: 6.9 Only 3 definitely haven’t had data breached.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Data Protection Report

DECEMBER 17, 2020

On 25 November 2020, the European Commission ( EC ) published its proposed Data Governance Regulation (the DGR ), which will create a new legal framework to encourage the development of a European single market for data. What are the objectives of the Data Governance Regulation?

Government 101

Government Personal data Marketing Artificial Intelligence 101