HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

The Last Watchdog

MAY 10, 2021

Back in the mid-1990s, big banks and insurance companies came up with something called “bespoke assessments” as the approach for assessing third party vendor risk. CyberGRX launched in 2016 as a clearinghouse for companies to pool and share standardized assessment data and actually analyze the results for action. Visibility boost.

Risk 195

Risk Insurance Access Security 195

Data Matters

JANUARY 28, 2022

The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. Create, Maintain, and Exercise a Cyber Incident Response, Resilience, and Continuity of Operations Plan. The post U.S.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Hunton Privacy

APRIL 18, 2023

The bill also contains a number of exemptions, including exceptions for financial institutions, affiliates, and data subject to Title V of the Gramm-Leach-Bliley Act, covered entities and business associates under the Health Insurance Portability and Accountability Act of 1996, nonprofit organizations and institutions of higher education.

Privacy 132

Privacy Personal data Sales Insurance 132

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). The bill is pending California Governor Gavin Newsom’s signature. Violations of the Act are subject to civil penalties.

Privacy 85

Privacy Insurance Marketing Information governance 85

Hunton Privacy

MARCH 24, 2022

following California, Virginia and Colorado, to enact a consumer data privacy law, the Utah Consumer Privacy Act (the “UCPA”). Notably, the UCPA adopts the VCDPA’s more narrow definition of “sale,” which is limited to the exchange of personal data for monetary consideration by a controller to a third party.

Privacy 113

Privacy Personal data Sales B2B 113

Hunton Privacy

FEBRUARY 25, 2020

Most companies are no strangers to the consequences of a data breach. Incident readiness includes having a state-of-the-art incident response plan, conducting tabletop exercises, implementing a vendor management program and having adequate cybersecurity insurance. It’s now rare to be unaffected by such incidents.

Insurance 71

Insurance Data breaches Cybersecurity Privacy 71

DLA Piper Privacy Matters

OCTOBER 7, 2021

The Middle East’s data protection regulatory landscape is complex, and continues to develop with Saudi Arabia’s ( KSA ) newly published Personal Data Protection Law ( PDPL ). While the PDPL contains the main features of a modern data protection law, it cannot be considered a direct analogue of the GDPR. Deceased’s data.

Personal data 96

Personal data Compliance Computer and Electronics IoT 96

CGI

MAY 27, 2016

Time and tide waits for no man – IoT in Insurance. This old saying could also be applied for what is happening in the insurance market with IoT and that given the drive behind IoT in both the consumer and business markets. For example, car insurance could be varied between theft and fully comprehensive when the Car is not being used.

Insurance 40

Insurance IoT Marketing Manufacturing 40

Data Matters

DECEMBER 2, 2020

On November 20, 2020, the Singapore Personal Data Protection Commission (PDPC) published a set of draft advisory guidelines (the Advisory Guidelines) to provide clarification on recent amendments to the Personal Data Protection Act (the PDPA Amendments). Mandatory data breach notification (the DBN Obligation).

Data Privacy 74

Data Privacy Privacy Data breaches Personal data 74

Hunton Privacy

JULY 12, 2023

Thus, like most other comprehensive state privacy laws, employee data and business-to-business data are excluded from the scope of the OCPA. The OCPA provides an exemption to personal data subject to the Gramm-Leach-Bliley Act, the Health Insurance Portability and Accountability Act, and a number of other federal laws.

Privacy 52

Privacy Personal data Insurance Sales 52

AIIM

APRIL 12, 2022

If I’m not Zooming with my primary care provider, I’m swapping data with a specialist via a phone app or transmitting my blood pressure readings from my remote monitor to the disembodied nurse in my voicemail who chides me with messages if I miss a reading. Your symptoms will often be diagnosable from that data. Or so it seems.

Computer and Electronics 104

Computer and Electronics Insurance Marketing Paper 104

Armstrong Archives

AUGUST 25, 2023

The Health Insurance Portability and Accountability Act (HIPAA) ensures individuals’ health data protection and privacy. This includes insurance companies, nurses, and doctors. Healthcare has become more interconnected than ever, making it important to protect patients’ sensitive information.

Computer and Electronics 52

Computer and Electronics Insurance Compliance Risk 52

Hunton Privacy

MARCH 25, 2020

The Spanish Data Protection Authority (the “AEPD”) recently published a report on data processing activities carried out by data controllers in the private and public sectors as a result of the spread of the COVID-19 virus (the “Report”). The Report then turns to legal bases for processing personal data in the COVID-19 context.

Personal data 75

Personal data GDPR Risk Insurance 75

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. NAIC Considers Comments to the Group Capital Calculation Template and Instructions and Related Revisions to the Insurance Holding Company Act . GCC Template and Instructions.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

AIIM

JULY 24, 2018

Data Privacy and Open Data: Secondary Uses under GDPR. Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. GDPR Compliance Starts with Data Discovery.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Thales Cloud Protection & Licensing

MARCH 6, 2018

This year, the major regulation that will be implemented, is the European Union’s General Data Protection Regulation (GDPR) , which takes effect on May 25, 2018. GDPR enables consumers to view, limit and control how companies collect and process their personal data. And this isn’t just happening in New York.

Compliance 88

Compliance GDPR Encryption Data Privacy 88

eSecurity Planet

DECEMBER 9, 2021

We make IT, security, or any business decision by weighing the risks and the rewards. Or as is often the case with security, what costs can we skip and still escape big penalties later? Unfortunately for those of us indulging in wishful thinking, the likelihood and costs of data breaches continue to increase.

Insurance 125

Insurance Ransomware Data breaches Cloud 125

Hunton Privacy

DECEMBER 1, 2020

On November 26, 2020, the French Data Protection Authority (the “CNIL”) announced that it imposed a fine of €2.25 million on Carrefour France and a fine of €800,000 on Carrefour Banque for various violations of the EU General Data Protection Regulation (“GDPR”) and Article 82 of the French Data Protection Act governing the use of cookies.

GDPR 91

GDPR Personal data Data collection Marketing 91

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. systemic risk of insurers with other parts of the financial system, notably the banking.

Insurance 68

Insurance Paper Risk Big data 68

Adam Levin

MARCH 18, 2020

While the transition to remote appointments may help flatten the curve of Covid-19 cases and provide much-needed relief to medical professionals, it does create a new set of cybersecurity concerns, especially regarding compliance with the Health Insurance Portability and Accountability Act (HIPAA ).

Communications 97

Communications Insurance Compliance Cybersecurity 97

Hunton Privacy

JULY 20, 2023

On June 30, 2023, the Delaware House of Representatives passed the Delaware Personal Data Privacy Act ( H.B. 154 ) (the “DPDPA”), a day after the Delaware Senate passed the legislation. The DPDPA heads to Governor John Carney for a final signature. This could make Delaware the 13th U.S. state to enact comprehensive privacy legislation.

Privacy 52

Privacy Personal data Sales Risk 52

Hunton Privacy

MAY 22, 2018

On May 16, 2018, the Irish Data Protection Bill 2018 (the “Bill”) entered the final committee stage in Dáil Éireann (the lower house and principal chamber of the Irish legislature). Children’s Data : The Bill notes that for the purposes of Data Protection Regulation in Ireland, a child is a person under 18 years of age.

GDPR 48

GDPR Personal data Marketing Insurance 48

Security Affairs

SEPTEMBER 15, 2022

In this case, the attackers used both publicly available PII and data gained through phishing attacks aimed at gaining access to customer accounts. Below is the list of mitigations recommended by the FBI: Ensure anti-virus and anti-malware is enabled and security protocols are updated regularly and in a timely manner.

Passwords 85

Passwords Phishing Authentication Communications 85

DLA Piper Privacy Matters

MAY 5, 2020

Vehicles, drivers and passengers are becoming more and more connected, generating increasing amounts of data. Adjacent to these initiatives, the European Data Protection Board (“EDPB”) recently published draft guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications.

Privacy 69

Privacy Personal data GDPR Insurance 69

HL Chronicle of Data Protection

MARCH 16, 2020

The panel’s key messages for clients included the following: Data security and privacy are mission critical and should be discussed at the most senior levels of the organisation. The incident response plan should be tested in tabletop exercises involving the individuals and teams who would be involved in a real-world incident.

Cybersecurity 59

Cybersecurity Financial Services Risk Insurance 59

Data Matters

SEPTEMBER 24, 2019

Today, more than 120 countries have privacy and data protection laws or regulations in place. Many of the new or modernized laws tend to be based on comprehensive legislation, rather than sectoral rules, as data needs to move across industry groups and borders. An Overview of the BDPA.

Personal data 68

Personal data GDPR Data Privacy Privacy 68

Data Matters

DECEMBER 1, 2021

Concurrently, the OCC , the Board of Governors of the Federal Reserve System, and the Federal Deposit Insurance Corporation (the Agencies) released a joint statement alerting the industry of their intent to provide additional guidance in the coming months concerning certain activities related to cryptoassets conducted by banking organizations.

Compliance 88

Compliance Risk Insurance Sales 88

John Battelle's Searchblog

JANUARY 25, 2019

Sovrn , a company I still chair, has a similar mission, but with a serious data and tech focus. My current work is split between two projects: One has to do with data governance, the other political media. First, Data. Big data, data breaches, data mining, data science…Today, we’re all about the data.

Government 92

Government IT Marketing ROT 92

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. geolocation data. geolocation data. biometric information.

GDPR 79

GDPR Privacy Sales Data breaches 79

DLA Piper Privacy Matters

JUNE 14, 2018

The French Constitutional Council has issued its ruling on June 12 regarding the new data protection law implementing the EU General Data Protection Regulation (GDPR). By Denise Lebeau-Marianna and Caroline Chancé. It’s a PASS!

GDPR 40

GDPR Personal data Insurance Government 40

Hunton Privacy

NOVEMBER 19, 2013

On November 14, 2013, the Minister of the Malaysian Communications and Multimedia Commission (the “Minister”) announced that Malaysia’s Personal Data Protection Act 2010 (the “Act”) would be going into effect as of November 15, marking the end of years of postponements. The law imposes a number of generally applicable principles.

Personal data 63

Personal data Marketing Communications Insurance 63

Data Matters

APRIL 10, 2020

Responses to a request to know must identify, to a certain extent, the data that a business cannot disclose (§ 999.313). When responding to an access request, the revised regulations clarify that a business must “inform the consumer with sufficient particularity” the type of data it has collected about the consumer.

Privacy 68

Privacy Sales Insurance Compliance 68

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. Genetic Data: California Data Breach Notification and Data Security Law Amendment Bill.

Privacy 98

Privacy Insurance Security Data breaches 98

DLA Piper Privacy Matters

DECEMBER 14, 2018

The Dutch Data Protection Authority ( Autoriteit Persoonsgegevens , “ Dutch DPA “) previously stated that it shall focus its enforcement actions on the public and health sector, and seems to act upon its words. First of all, the focus seems to lie on accountability, one of the core data protection principles.

GDPR 40

GDPR Personal data Insurance Privacy 40

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. geolocation data. geolocation data. biometric information.

GDPR 60

GDPR Privacy Sales Data breaches 60

Hunton Privacy

OCTOBER 31, 2011

Members of Parliament on the House of Commons Justice Select Committee have called for courts in the United Kingdom to be given greater powers to imprison and fine individuals who breach the Data Protection Act (“DPA”). Commissioner Christopher Graham to the Committee earlier this year.

Personal data 45

Personal data Insurance Data breaches Government 45