IT Governance

NOVEMBER 28, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. We’ve also included more details on the top 3 biggest breaches of the week. The ‘enforcement’ and ‘other news’ categories remain unchanged. Breached records: 95,592,696.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Data Protection Report

MAY 17, 2019

The bill would have made three significant changes to the CCPA: It would have expanded the consumer’s private right of action from only certain security breaches to any violation of the CCPA. Social media data – right to remove and prohibit sale. Excludes “employees” from definition of “consumer”. Bills to narrow CCPA.

Retail 40

Retail Privacy Insurance Manufacturing 40

HL Chronicle of Data Protection

SEPTEMBER 25, 2019

AB-25 (Human Resources Data Exception). The temporary delay of full CCPA applicability was inserted to encourage the legislature to consider an employee privacy bill in 2020, not to exclude employee data from California privacy law entirely. making numerous technical changes to correct errors or clarify typos.

Sales 40

Sales Communications Data breaches Compliance 40

Hunton Privacy

SEPTEMBER 16, 2019

HR data exemption : Adds 1798.145(g) to exempt the following from the CCPA’s application, except for § 1798.100(b) (notice provision) and § 1798.150 (private right of action provision):“. (C) Adds definitions of “contractor,” “director,” “medical staff member,” “officer” and “owner.” (Cal. Code § 1798.145(g)(1)(A-C).

Sales 48

Sales B2B Communications Data breaches 48

IT Governance

APRIL 25, 2023

Insider threats are one of the most difficult security challenges that organisations face. Preventing this from happening requires a nuanced approach to information security, and it’s one that organisations are increasingly struggling with. Insider threats fall into two categories: malicious or negligent.

Data breaches 105

Data breaches Phishing Personal data Access 105

Data Protection Report

SEPTEMBER 17, 2019

Changes range from clarifications to definitions and new exemptions to technical corrections. Section (a)(2) is amended to permit the consumer to request that the business notifies a consumer of the categories of personal information sold for “each category of third party”, rather than “each third party.”

B2B 40

B2B Privacy Communications Encryption 40

Data Protection Report

JUNE 6, 2019

Although the concept of providing consumers certain privacy rights is similar, the law has some significant differences from the CCPA, including the definition of “sale”. Unlike CCPA, the new law has no provisions relating to access or deletion or a private right of action relating to breaches.

Sales 40

Sales Privacy Insurance Manufacturing 40