Data Matters

NOVEMBER 4, 2020

The CPRA is significantly more complex than the CCPA and will require an investment of time and money to convert existing CCPA programs and build processes to meet the new requirements as California continues to lead the nation on, and with, privacy legislation and regulation. Changes to the Definition of Businesses Subject to the CPRA.

Privacy 122

Privacy B2B Sales Data breaches 122

IT Governance

NOVEMBER 9, 2018

In brief: Profiling now has a distinct definition. Additional restrictions apply to processing special category and children’s data. If you are a data controller, it is likely that you will need to update your processing activities to meet the GDPR’s requirements relating to individual automated decision-making, including profiling.

GDPR 88

GDPR Personal data Financial Services Compliance 88

Data Protection Report

MARCH 7, 2024

The proposed definition of “listed identifier” is Full or truncated government identification or account number (such as a Social Security Number, driver’s license or state identification number, passport number, or Alien Registration Number) [Note that this definition apparently includes truncated Social Security Numbers.]

Access 59

Access Military Compliance Personal data 59

Hunton Privacy

OCTOBER 14, 2021

AB-825 : This bill amends California’s (1) data breach notification law (for both government agencies (Cal. to add “genetic data” as a category of personal information that would trigger individual and regulator notification if breached (data breach notification law) and is required to be protected (data security law).

Privacy 98

Privacy Insurance Security Data breaches 98

Data Protector

OCTOBER 11, 2017

Data is not just a resource for better marketing, better service and delivery. That is compounded by the fact that this is a Lords starter Bill that comes to us without the benefit of consideration in the other place, and particularly without the usual evidence-taking sessions that ensure that a Bill meets the needs of those affected by it.

GDPR 120

GDPR Personal data Government IT 120

ForAllSecure

APRIL 26, 2022

So there’s a need, a definite need, for information security professionals to have access to industrial control systems -- not virtual, but actual hands on systems -- so they can learn. Kim Zetter’s book, Countdown to Zero Day, is perhaps the definitive book on the subject. Let me start over that. Technology Security.

Energy and Utilities 52

Energy and Utilities Manufacturing Risk IT 52

IT Governance

DECEMBER 19, 2023

We’re also introducing two new categories this week: ‘AI’ and ‘Key dates’. Only 4 definitely haven’t had data breached. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. 144 of them are known to have had data exfiltrated or exposed.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52