Data Protection Report

OCTOBER 3, 2019

BoE publish high level findings of the financial sector (“sector”) cyber simulation exercise. Exercise overview. The exercise explored the sector’s resilience to a major cyber incident impacting the UK. The exercise demonstrated the sector’s ability to respond to a dynamic and challenging disruption simulation.

Communications 40

Communications Marketing Risk IT 40

Hunton Privacy

FEBRUARY 2, 2022

On January 28, 2022, in celebration of Data Privacy Day, the Colorado Attorney General’s Office issued prepared remarks from Colorado Attorney General Phil Weiser and published guidance on data security best practices. Regularly reviewing and updating security policies.

Privacy 102

Privacy Security Data breaches Ransomware 102

Security Affairs

SEPTEMBER 20, 2022

American Airlines disclosed a data breach, threat actors had access to an undisclosed number of employee email accounts. American Airlines recently suffered a data breach, threat actors compromised a limited number of employee email accounts. SecurityAffairs – hacking, data breach). Pierluigi Paganini.

Data breaches 98

Data breaches Cybersecurity Phishing Access 98

Security Affairs

DECEMBER 17, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 91

Security Data breaches Ransomware Artificial Intelligence 91

Security Affairs

FEBRUARY 26, 2023

Every week the best security articles from Security Affairs are free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here.

Security 94

Security Military Ransomware Insurance 94

Data Protector

AUGUST 17, 2020

One of the Government's core objectives throughout the Brexit negotiations has been to respect data protection rights, slash Brussels' red tape and allow the United Kingdom to be a competitive safe haven for businesses all over the world. This is a process that would never end.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

Dark Reading

FEBRUARY 1, 2023

Findings underscore security awareness training that leverages practical, hands-on exercises is essential to creating a security-aware culture.

Security awareness 59

Security awareness Phishing Security Risk 59

Hunton Privacy

AUGUST 10, 2023

On August 9, 2023, India’s upper house ( i.e. , Rajya Sabha) passed the Digital Personal Data Protection Bill (“DPDPB”), two days after India’s lower house ( i.e. , Lok Sabha) passed the legislation. The DPDPB now heads to India President Droupadi Murmu for signature.

Personal data 52

Personal data Data breaches Government Access 52

IBM Big Data Hub

FEBRUARY 23, 2024

The General Data Protection Regulation (GDPR), the European Union’s landmark data privacy law, took effect in 2018. Yet many organizations still struggle to meet compliance requirements, and EU data protection authorities do not hesitate to hand out penalties. Irish regulators hit Meta with a EUR 1.2 billion fine in 2023.

GDPR 83

GDPR Compliance Personal data Privacy 83

Security Affairs

JULY 22, 2021

CISA released an alert today about several stealth malware samples that were found on compromised Pulse Secure devices. Cybersecurity and Infrastructure Security Agency (CISA) published a security alert related to the discovery of 13 malware samples on compromised Pulse Secure devices, many of which were undetected by antivirus products.

e-Discovery 129

e-Discovery Security Passwords Access 129

Data Matters

FEBRUARY 6, 2019

On December 3, 2018, twelve attorneys general (“AGs”) jointly filed a data breach lawsuit against Medical Informatics Engineering and its subsidiary, NoMoreClipboard LLC (collectively “the Company”), an electronic health records company, in federal district court in Indiana. See Indiana v. Informatics Eng’g, Inc. , 3:18-cv-00969 (N.D.

Data breaches 83

Data breaches Computer and Electronics Security Insurance 83

Krebs on Security

JULY 19, 2021

Browse the comments on virtually any story about a ransomware attack and you will almost surely encounter the view that the victim organization could have avoided paying their extortionists if only they’d had proper data backups. We have backups, the data is there, but the application to actually do the restoration is encrypted.’

Ransomware 338

Ransomware Encryption Insurance Cybersecurity 338

Security Affairs

MARCH 12, 2023

Experts warn that employees are providing sensitive corporate data to the popular artificial intelligence chatbot model ChatGPT. have provided company data to the popular chatbot model since it launched. have provided company data to the popular chatbot model since it launched. million workers at companies across industries.

Risk 98

Risk Artificial Intelligence Privacy Personal data 98

Security Affairs

AUGUST 31, 2023

Also, the credentials could have been used to gain initial access into corporate networks to deploy ransomware, steal or sabotage internal documents, or gain access to user data. The data was publicly accessible for 5 months, as the leak was first indexed by IoT search engines on January 31st, 2023.

Passwords 142

Passwords Healthcare Manufacturing Access 142

IT Governance

APRIL 27, 2018

This week, we discuss TSB’s chaotic system upgrade, a security flaw in electronic hotel locks and a major NATO cyber security exercise. The problems started last weekend, when Lloyds transferred its customer data from the IT system of its former owners, Lloyds, to its new owners, Sabadell.

Military 49

Military Manufacturing Information Security Access 49

Security Affairs

MAY 6, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 98

Security Libraries Data breaches Ransomware 98

Security Affairs

AUGUST 21, 2021

The US Cybersecurity and Infrastructure Security Agency (CISA) released guidance on how to prevent data breaches resulting from ransomware attacks. “All organizations are at risk of falling victim to a ransomware incident and are responsible for protecting sensitive and personal data stored on their systems.

Data breaches 113

Data breaches Ransomware Encryption Cybersecurity 113

Collibra

OCTOBER 4, 2023

To help federal agencies maximize innovation efforts, Collibra and Accenture Federal Services recently hosted ‘Enabling a Federal Data Mesh ,’ a webinar to demonstrate the data mesh experience and illustrate how it can accelerate data discovery and speed time-to-value for federal agencies.

Government 95

Government Data science Analytics Access 95

Hunton Privacy

SEPTEMBER 21, 2023

362 (“Act”), a bill that would impose new requirements on data brokers and grant residents new rights designed to facilitate control over their personal data. The Act would grant California consumers the right to request that data brokers (1) delete and (2) limit the further sale and sharing of consumers’ personal data.

Insurance 69

Insurance Personal data Sales Compliance 69

Thales Cloud Protection & Licensing

JANUARY 28, 2020

January 28, 2020 marks the 13th iteration of Data Privacy Day. An extension of the celebration for Data Protection Day in Europe, Data Privacy Day functions as the signature event of the National Cyber Security Centre’s ongoing education and awareness efforts surrounding online privacy. Encryption. Key Management.

Data Privacy 150

Data Privacy Privacy Encryption Unstructured data 150

DLA Piper Privacy Matters

DECEMBER 3, 2021

The United Arab Emirates (“UAE”) has enacted its long awaited federal level data protection law. 45 of 2021 on the Protection of Personal Data Protection (“ PDPL ”), which was issued on 26 September 2021. This article examines some of its key features. What does the PDPL cover and who does it apply to? Definitions.

Personal data 105

Personal data Data breaches GDPR Compliance 105

IT Governance

FEBRUARY 9, 2021

If your marketing agency is under the impression that cyber security is strictly an IT issue, you should think again. Effective security is a company-wide commitment, and marketers play one of the most crucial roles. Adopt an ISMS to manage the data you collect. Meet your data protection by design and by default requirements.

Marketing 123

Marketing Security GDPR Privacy 123

Data Protection Report

DECEMBER 12, 2023

In our previous post , we discussed specific considerations for common boilerplate provisions in data processing agreements (DPAs). Due to the sensitivity of data transfers and privacy laws, DPAs require careful drafting to ensure the data processor complies with appropriate privacy obligations and is responsible for any non-compliance.

Artificial Intelligence 62

Artificial Intelligence Compliance Privacy Security 62

Schneier on Security

MARCH 2, 2020

Privacy International has the details : Key facts: Despite Facebook claim, "Download Your Information" doesn't provide users with a list of all advertisers who uploaded a list with their personal data. As a user this means you can't exercise your rights under GDPR because you don't know which companies have uploaded data to Facebook.

Personal data 121

Personal data GDPR Data collection Privacy 121

Hunton Privacy

MAY 13, 2021

On April 29, 2021, the New York City Council passed the Tenant Data Privacy Act (“TDPA”), which would regulate the collection, use, safeguarding and retention of tenant data by owners of “smart access” buildings. Security safeguards. Data destruction. The TDPA has been sent to the New York City Mayor’s desk for signature.

Data Privacy 106

Data Privacy Privacy Authentication Passwords 106

Security Affairs

MAY 22, 2023

billion fine for transferring European user data to the US. billion for transferring user data to the US. This is the biggest fine since the adoption of the General Data Protection Regulation (GDPR) by the European Union (EU) on May 25, 2018. Data Privacy Framework on December 13, 2022. The European Union fined Meta $1.3

GDPR 93

GDPR Personal data Privacy Data Privacy 93

Security Affairs

APRIL 30, 2023

Credit: ESA – European Space Agency The offensive cybersecurity team at Thales demonstrated how to take control of the ESA satellite, the is considered the world’s first ethical satellite hacking exercise. The exercise aims at assessing the resilience of satellites to cyber attacks. According to classified U.S.

Cybersecurity 98

Cybersecurity Military Access Education 98

Data Protection Report

NOVEMBER 11, 2021

The Cyberspace Administration of China ( CAC ) released the draft Security Review Measures for Cross-Border Data Transfer (the Draft Security Review Measures ) for public comments on 29 October 2021 – shortly before the effective date of the Personal Information Protection Law ( PIPL ), 1 November 2021.

Security 52

Security Risk Personal data Access 52

HL Chronicle of Data Protection

JULY 7, 2020

The Dutch Data Protection Authority (DPA) issued a EUR 830,000 (approximately USD 937,000) fine against the Dutch Credit Registration Bureau (BKR) for violating data subject rights. The fine stems from BKR’s practice of charging fees and discouraging individuals who wanted to access their personal data.

GDPR 112

GDPR Personal data Data collection Access 112

Data Protection Report

SEPTEMBER 27, 2021

How do you balance sharing and protecting your business’ data? Unlike tangible assets, which can be protected primarily through physical means, intangible assets such as data require additional considerations. One key strategy to protect your business’ data is to characterize, and protect, that data as intellectual property.

Privacy 87

Privacy IT Security Access 87

Data Protection Report

AUGUST 5, 2021

This follows the enactment earlier this year of the Data Security Law ( DSL ), which will take effect on 1 September 2021. The PIPL will be China’s primary privacy and data protection law, despite the common misconception that the DSL is China’s privacy law. sharing data with third parties, etc.). (ii)

Privacy 98

Privacy Compliance GDPR Personal data 98

OpenText Information Management

MARCH 28, 2024

Environmental Protection Agency and National Security Agency have requested that each U.S. DNS Exfil, SCADA controls, DGA), but also need the additional layer of security that may be missed by using only endpoint protection (e.g. State carry out comprehensive assessments of their cybersecurity services and practices.

Cybersecurity 62

Cybersecurity Military IoT Security 62

IT Governance

DECEMBER 20, 2022

Although there have still been a few surprises, with the death of Queen Elizabeth II and blazing heatwaves across the UK to name but two, it was a familiar year in the cyber security landscape. Cyber criminals continued to wreak havoc, with the likes of Twitter , Uber and Neopets all reporting mammoth data breaches.

Security 132

Security Data breaches Ransomware Military 132

DLA Piper Privacy Matters

JULY 1, 2022

The China draft SCCs have been published, but may not provide the easy approach to cross border transfers of Mainland China personal data we have hoped to. The above threshold is generally aligned with the draft Measures on Security Assessment of Overseas Data Transfer released last year.

GDPR 97

GDPR Data Privacy Personal data Privacy 97

AIIM

APRIL 16, 2020

But, as you start your social distancing/remote working, there are certain strict and important practices that every organization will have to exercise. Are you ready to learn the best security practices for remote working that can be used both by organizations and employees for maintaining ethics and productivity? Let’s get started!

Security 134

Security Passwords Cloud Risk 134

Hunton Privacy

JANUARY 19, 2024

In line with the CCPA and other state privacy laws, the New Jersey law broadly defines “sale” as the disclosure of personal data to a third party for “monetary or other valuable consideration.” The law contains a narrow data-level (and not entity-level) HIPAA exemption, exempting PHI collected by a HIPAA covered entity or business associate.

Privacy 97

Privacy Personal data Sales Risk 97

Hunton Privacy

JULY 9, 2020

On July 1, 2020, the Dubai International Financial Centre (“DIFC”) Data Protection Law No. Data Protection Principles: The New DP Law sets out requirements for processing that are largely identical to the data protection principles under the GDPR. 5 of 2020 came into effect (“New DP Law”). The New DP Law replaces DIFC Law No.

Personal data 127

Personal data GDPR Data breaches Compliance 127