Data Protection Report

NOVEMBER 2, 2023

On November 1, 2023, the New York Department of Financial Services (NYDFS) finalized the second amendment to its cybersecurity regulations, which are available here. The two definitions from Section 500.1 a)), this new term applies. NYDFS stated: The Department has revised the language of § 500.17(a)

Cybersecurity 105

Cybersecurity Compliance Financial Services Government 105

The Last Watchdog

APRIL 3, 2019

Identity governance and administration, or IGA , has suddenly become a front-burner matter at many enterprises. Related: Identity governance issues in the age of digital transformation. I had the chance at RSA 2019 to visit with Mike Kiser, global strategist at SailPoint , an Austin, TX-based supplier of IGA services to discuss this.

Digital transformation 140

Digital transformation Insurance Compliance Healthcare 140

Data Matters

FEBRUARY 12, 2019

The CCPA was written and enacted with extraordinary speed, as legislators felt the need to move quickly in order to preempt a data privacy ballot initiative that had received enough signatures to be placed on California’s November ballot. Definition of Unique Identifiers. Updating as needed the definition of unique identifiers.

Sales 74

Sales Privacy Data Privacy Compliance 74

IBM Big Data Hub

JUNE 26, 2023

One of the few pre-scripted questions I ask in most of the episodes is about the guest’s definition of “hybrid cloud.” Many of the conversations I had were about how exactly enterprises make that move towards hybrid cloud. ” The answers have all been comparable.

Cloud 57

Cloud Financial Services IT Government 57

DLA Piper Privacy Matters

AUGUST 23, 2021

Rather than bringing substantial changes to the existing China data privacy framework, the PIPL helpfully consolidates and clarifies obligations on processing of personal information at a national law level. To be clear, this is not China’s own GDPR.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

erwin

MAY 2, 2019

Enterprise architect is a common job title within IT organizations at large companies, but the term lacks any standard definition. That’s one of the reasons the enterprise architect role has no standard definition. And that’s where an enterprise architect in the role of an internal consultant comes into play.

Digital transformation 95

Digital transformation Healthcare Compliance Cloud 95

IT Governance

NOVEMBER 9, 2018

In addition to data subjects’ rights to be informed, of access, to rectification, to erasure, to restrict processing, to data portability and to object, the EU’s GDPR (General Data Protection Regulation) sets out requirements relating to automated individual decision-making, including profiling. What is profiling under the GDPR?

GDPR 83

GDPR Personal data Financial Services Compliance 83

Collibra

NOVEMBER 3, 2020

It’s no longer sufficient to think in terms of data management. For banks to ensure preparation for CCAR MRA and sustainable regulatory compliance, they need to shift their thinking to focus on data governance, which requires a different set of capabilities. CCAR MRAs and governance capabilities .

Metadata 45

Metadata Government Compliance Financial Services 45

DLA Piper Privacy Matters

JULY 30, 2019

A data breach, that is. It’s your service provider’s breach, but it involves your (more likely, your customer’s) data. Service provider cyber incidents have exploded in volume, type, frequency, response time and cost. Who “owns” a data breach?

Data breaches 45

Data breaches Cybersecurity Financial Services Risk 45

HL Chronicle of Data Protection

DECEMBER 7, 2018

In such situations, a financial institution must comply with a wide array of CCPA obligations, including requirements to make certain disclosures to consumers and to provide certain rights to consumers, such as the right to stop “sales” of their personal information and the right to access data that a business has collected about them.

Privacy 40

Privacy Financial Services Compliance Data breaches 40

Reltio

JUNE 20, 2019

Henrik Liliendahl is an MDM and PIM expert; speaker and blogger ( www.liliendahl.com and [link] ) and the Co-Founder, Chairman and CTO of Product Data Lake a product information exchange service. We didn’t even have a computer at that school so the whole class was about things drawn on the blackboard. Kate Tickner, Reltio.

MDM 49

MDM Manufacturing Computer and Electronics Digital transformation 49

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs.

Privacy 85

Privacy GDPR Data breaches Risk 85

HL Chronicle of Data Protection

NOVEMBER 15, 2018

The draft text of the EU-UK withdrawal agreement was published by the UK Government and the European Union yesterday, providing some of the first concrete indicators of the possible direction of travel in the area of data protection. What constitutes personal data that is subject to the withdrawal agreement is currently unclear.

GDPR 40

GDPR Personal data Government Financial Services 40

HL Chronicle of Data Protection

MAY 21, 2018

Circuit struck down the FCC’s 2015 interpretation of the definition of “automatic telephone dialing system” (autodialer) as overly broad, arbitrarily vague, and “utterly unreasonable.” See our earlier post for more information about the decision. In March, the D.C. Comments are due June 13 and reply comments are due June 28.

Communications 40

Communications Financial Services Privacy Government 40

Reltio

MARCH 19, 2019

Mike Evans is CTO and Founder at Comma Group and has spent more than a decade in the business analysis, MDM and data management space. What is your background and what was your route into data management? I never consciously chose to work in data. It became apparent very quickly that a lack of focus on data was the root cause.

MDM 75

MDM Retail IT Government 75

Data Protection Report

MARCH 7, 2024

China Cuba Iran North Korea Russia Venezuela What is “personally identifiable data” that is “in combination with each other”? The proposed regulation would define the term to mean any “listed identifier” that is linked to any other “listed identifier.” Note that the only difference between the two examples is the addition of IP addresses.

Access 59

Access Military Compliance Personal data 59

ARMA International

DECEMBER 26, 2019

Government topped the list of vertical industries at 23%. in 2017), with the remainder reporting into senior administrative roles, compliance, corporate services, or finance teams. in 2017), with the remainder reporting into senior administrative roles, compliance, corporate services, or finance teams.

Content services 76

Content services Cloud Records Management Privacy 76

Data Protection Report

JANUARY 6, 2020

2020 could well be a year of data export turmoil – so brace yourself! Although the AG’s view was that the SCCs are valid, he suggested that those using them would need to examine the national security laws of the data importer’s jurisdiction to determine whether they can in fact comply with the terms of the SCCs.

Privacy 52

Privacy GDPR Data breaches Risk 52

Hunton Privacy

OCTOBER 17, 2012

On October 15, 2012, the Singapore Parliament passed the Personal Data Protection Act 2012. The new law will apply only to data processing in the private sector as data processing by public agencies (or organizations acting on behalf of public agencies) are already subject to internal government rules.

Personal data 45

Personal data Financial Services Data Privacy Data breaches 45

Hunton Privacy

JANUARY 20, 2023

As financial services authorities move to regulate digital assets in jurisdictions worldwide, the paper highlights the need to bring privacy regulators into the discussion so that data privacy issues affecting blockchain are addressed in tandem. Data minimization. Data security. Accountability. Purpose limitation.

Paper 134

Paper Blockchain Privacy Financial Services 134

HL Chronicle of Data Protection

MARCH 14, 2019

The proposed Rule would allow the CISO to be an employee of a service provider or affiliate, although in that case the FI would be required to designate a senior member of its personnel to direct and oversee the CISO. Board reporting. Periodic risk assessments.

Privacy 40

Privacy Risk Cybersecurity Information Security 40

IBM Big Data Hub

OCTOBER 16, 2023

As the world continues to become a globally connected ecosystem, data fluidity has sparked national and international conversations around notions of data and digital sovereignty. First, we must understand how data sovereignty came to be. What is data sovereignty?

Cloud 66

Cloud Compliance Data Privacy Privacy 66

Collibra

MAY 16, 2022

As a principal for data quality, I enjoy taking time to work with our customer base. These organizations demonstrate perspectives and prioritization that show great promise in the industry of data. . For financial services, data governance found its roots in risk. Audit & Professional Services.

Risk 91

Risk Government Financial Services Access 91

IT Governance

MARCH 11, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: 36 million records. Data breached: 6,935,412 individuals’ data. Data breached: 6.9 Only 3 definitely haven’t had data breached.

Data Privacy 79

Data Privacy Privacy Security Data breaches 79

Data Matters

SEPTEMBER 4, 2019

NAIC Evaluating Definition of “Best Interest” to Determine Whether to Impose Such a Standard in the Suitability in Annuity Transactions Model Regulation. NAIC Continues Efforts Related to Anti-Rebating Laws and Its Review of Predictive Analytics and the Use of Certain Data in Rating and Underwriting.

Insurance 68

Insurance Paper Risk Analytics 68

IT Governance

DECEMBER 11, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: more than 59 million data records. BianLian claims to have exfiltrated 5 TB of data, comprising millions of sensitive documents. Data breached: 5 TB.

Data Privacy 98

Data Privacy Energy and Utilities Privacy Manufacturing 98

erwin

FEBRUARY 7, 2019

Organization’s cannot hope to make the most out of a data-driven strategy, without at least some degree of metadata-driven automation. The volume and variety of data has snowballed, and so has its velocity. As such, traditional – and mostly manual – processes associated with data management and data governance have broken down.

Metadata 96

Metadata Healthcare Insurance Financial Services 96

Security Affairs

SEPTEMBER 1, 2023

This dupes a Windows machine that has not been patched against the vulnerability into allowing illegitimate data packets into the legitimate network. These data packets can contain malware such as a trojan, ransomware, or similar dangerous program. The NSA has declined to speak in detail about the hack or EternalBlue.

Phishing 109

Phishing Ransomware Search queries Access 109

IT Governance

JANUARY 23, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. The data set is a collection of 1 billion credentials sourced from stealer logs and hosted on the illicit.services website. Data breached: 70,840,771 email addresses.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Data Matters

MARCH 21, 2022

The reporting requirements will cover multiple sectors of the economy, including chemical industry entities, commercial facilities, communications sector entities, critical manufacturing, dams, financial services entities, food and agriculture sector entities, healthcare entities, information technology, energy, and transportation.

Ransomware 97

Ransomware Cybersecurity Agriculture Communications 97

Collibra

SEPTEMBER 5, 2019

This summer Dresner Advisory Services ranked Collibra as the number one vendor in their 2019 Data Catalog Study. Dresner surveyed nearly 800 business intelligence (BI) professionals to examine customer preferences, customer investment and vendor performance in the data catalog space. The importance of data governance .

Marketing 49

Marketing Analytics Government Financial Services 49

ForAllSecure

JANUARY 19, 2022

You might not think of it as a major aspect of security and yet, stolen credentials are really the key to data breaches today. It's about challenging our expectations about the people who hack for a living. That's quite a narrow definition. Welcome to The Hacker Mind, an original podcast from ForAllSecure.

Passwords 52

Passwords Authentication Access Data breaches 52

CGI

DECEMBER 18, 2018

One thing to note about Sydney in October is that if you don’t like the weather just wait half an hour and it will have completely changed. Interestingly, though it is also using Open Banking as the first use case for the application of its new “Customer Data Right” (CDR) legislation. Why am I doing this again?

Financial Services 40

Financial Services Encryption Marketing GDPR 40

ForAllSecure

APRIL 19, 2023

Maybe I’m thinking about Dan because of that anniversary. It’s about challenging our expectations about people who hack for a living. In the 1950s we started to get early operating systems, and these included supervisory programs that helped manage the data coming in and going back out.

Analytics 40

Analytics Communications Computer and Electronics Cybersecurity 40

Data Protection Report

MARCH 16, 2022

The relevant portions of the law, titled the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“Act”) proposes reporting requirements for incidents, establishes new programs to curtail ransomware attacks and encourages information sharing between government agencies. New Government Programs. Reporting Requirements.

Ransomware 59

Ransomware FOIA Agriculture Cybersecurity 59

Reltio

MAY 21, 2019

What was your route into IT and data management? I have been in the world of IT for about 33 years now although I was anything but IT minded as I was growing up. However, as soon as I entered the workforce it became apparent that the future was IT, technology and data management and that’s when I saw the light!

Digital transformation 40

Digital transformation Retail Manufacturing IT 40

HL Chronicle of Data Protection

SEPTEMBER 12, 2018

privacy laws which generally focus on specific sectors or issues, the CCPA applies broadly to businesses that collect personal information about California residents and aims to create significant new consumer privacy rights. Clinical trial data exception. provide additional CCPA analyses and reports. Recent Amendments to the CCPA.

Privacy 40

Privacy Compliance GDPR Data breaches 40