Hunton Privacy

MAY 10, 2022

On May 10, 2022, Connecticut Governor Ned Lamont signed An Act Concerning Personal Data Privacy and Online Monitoring , after the law was previously passed by the Connecticut General Assembly in April. Connecticut is now the fifth state to enact a consumer privacy law. As with most of the existing U.S.

Privacy 118

Privacy Personal data Sales B2B 118

eSecurity Planet

MARCH 29, 2024

Additionally, educating stakeholders and conducting regular security testing enhance overall data protection while reducing the likelihood of breaches. Train stakeholders : Educate your stakeholders and users to understand and carry out their data protection duties, and promote a culture of data security awareness.

Data breaches 70

Data breaches Compliance Risk Access 70

IT Governance

MARCH 11, 2024

Only 3 definitely haven’t had data breached. Source (New) Finance USA Yes 3,494 Woodruff Sawyer Source (New) Insurance USA Yes 3,087 Blackburn College Source (New) Education USA Yes 3,039 CAIRE Inc. 92 of them are known to have had data exfiltrated, exposed or otherwise breached. Organisation(s) Sector Location Data breached?

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Hunton Privacy

JUNE 22, 2020

On July 1, 2020, amendments to Vermont’s data breach notification law, signed into law earlier this year, will take effect along with Vermont’s new student privacy law. Login credentials are not part of the definition of PII, but the law’s definition of a security breach now covers “personally identifiable information or login credentials.”

Data breaches 107

Data breaches Privacy Education Data Privacy 107

IT Governance

DECEMBER 11, 2023

Only 3 definitely haven’t had data breached. Publicly disclosed data breaches and cyber attacks: full list This week, we’ve found 83,463,951 records known to be compromised, and 210 organisations suffering a newly disclosed incident. 138 of them are known to have had data exfiltrated or exposed.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

IT Governance

DECEMBER 5, 2023

Only 3 definitely haven’t had data breached. Source (New) Education USA Yes 3,022 Lakeview Healthcare System, LLC Source 1 ; source 2 (New) Healthcare USA Yes 2,495 The Hershey Company Source (New) Manufacturing USA Yes 2,214 Park Bank Source (New) Finance USA Yes 2,081 The Walker School, Inc.

Data Privacy 106

Data Privacy Privacy Manufacturing Retail 106

Data Protection Report

JUNE 21, 2023

The new law has exclusions for Gramm-Leach-Bliley-covered financial institutions, HIPAA-covered covered entities and business associates, non-profits, institutes of higher education, and electric utilities, power generation companies, and retail electric providers.

Privacy 84

Privacy Personal data Sales Retail 84

IT Governance

FEBRUARY 6, 2024

Only 1 definitely hasn’t had data breached. Publicly disclosed data breaches and cyber attacks: full list This week, we found 38,846,799 records known to be compromised, and 140 organisations suffering a newly disclosed incident. 123 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

IT Governance

JANUARY 3, 2024

Only 5 definitely haven’t had data breached. GB Universidad de La Punta Source (New) Education Argentina Yes 47,562 (95,123 lines; probably half repeated) Unfallkasse Thüringen Source (New) Insurance Germany Yes 45 GB Protektor24.ru 711 of them are known to have had data exfiltrated, exposed or breached.

Data Privacy 107

Data Privacy Insurance Manufacturing Retail 107

Data Matters

NOVEMBER 4, 2020

The results are in, and California voters have approved the California Privacy Rights Act (CPRA) which was listed on the ballot as Proposition 24. Even so, with these and other new requirements, the CPRA does not go as far as some consumer privacy advocates had hoped it would. A Closer Look at Key CPRA Provisions.

Privacy 122

Privacy B2B Sales Data breaches 122

Data Matters

AUGUST 9, 2021

In recent weeks, Connecticut passed An Act Concerning Data Privacy Breaches (“The Act”), and the Uniform Law Commission approved and recommended the Uniform Personal Data Protection Act (“UPDPA”). Connecticut: An Act Concerning Data Privacy Breaches.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

Hunton Privacy

NOVEMBER 27, 2019

On November 26, 2019, Senate Commerce Committee Ranking Member Maria Cantwell (WA), alongside Senators Brian Schatz (HI), Amy Klobuchar (MN) and Ed Markey (MA), unveiled a new comprehensive federal privacy bill entitled the Consumer Online Privacy Rights Act (“COPRA”). Read the bill.

Privacy 96

Privacy Personal data Data Privacy Education 96

IT Governance

APRIL 22, 2024

Mobile Guardian, which is used to help parents manage their children’s device usage, was hacked on 19 April, according to the Singaporean Ministry of Education. Only 5 definitely haven’t had data breached. 226 of them are known to have had data exfiltrated, exposed or otherwise breached. Organisation(s) Sector Location Data breached?

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

IT Governance

MARCH 5, 2024

Only 5 definitely haven’t had data breached. Publicly disclosed data breaches and cyber attacks: full list This week, we found 252,796,762 records known to be compromised, and 126 organisations suffering a newly disclosed incident. 110 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Data Matters

JUNE 22, 2022

Connecticut has passed a new state data privacy law slated to go into effect on July 1, 2023. Consistent with all of the state data privacy laws we have seen to date, the Connecticut law does not provide for a private right of action to broadly enforce the privacy rights provisions of the law.

Data Privacy 88

Data Privacy Privacy Personal data Sales 88

Hunton Privacy

DECEMBER 22, 2023

On December 20, 2023, the FTC issued a Notice of Proposed Rulemaking (“Notice”), which would bring long-anticipated changes to the children’s online data privacy regime at the federal level in the U.S. The Notice sets forth several important proposals aimed at strengthening the Children’s Online Privacy Protection Act Rule (“COPPA Rule”).

Privacy 72

Privacy Data Privacy Education Information Security 72

DLA Piper Privacy Matters

SEPTEMBER 2, 2021

This is a trend that has become particularly pronounced over the course of the Covid-19 pandemic, as everything from the delivery of education to socialising with friends has, as a matter of necessity, become increasingly digital. The Children’s Code is not new law, but a statutory Code of Practice under the Data Protection Act 2018.

Privacy 103

Privacy Education Personal data Compliance 103

Data Matters

JULY 28, 2021

Congress continuing to stymie federal omnibus privacy legislation, states have decidedly taken up the call. Jared Polis signed into law Senate Bill 21-190, the Colorado Privacy Act (CPA). Applicability and Definitions. Most recently, on July 8, 2021, Colorado Gov. After signing the CPA into law, Gov. ” Additionally, Gov.

Privacy 88

Privacy Sales Personal data Compliance 88

IT Governance

JANUARY 9, 2024

Only 1 definitely hasn’t had data breached. Source (New) Software Luxembourg Yes 3,600,000 National Automobile Dealers Association Source (New) Retail USA Yes 1,065,000 Consórcio Canopus Source (New) Professional services Brazil Yes 1,400,000 The Teaching Company (Wondrium by The Great Courses) Source (New) Education USA Yes 1.3

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

IT Governance

APRIL 9, 2024

Only 2 definitely haven’t had data breached. Enforcement Google agrees to delete billions of records and reduce incognito user tracking Google has agreed to settle a 2020 class action lawsuit accusing it of invading people’s privacy by collecting user data even in incognito mode. Organisation(s) Sector Location Data breached?

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

Data Matters

MARCH 28, 2022

See 45 CFR 164.308(a)(1)(ii)(A)-(B): Implementation Specification: Risk Analysis (required), Implementation Specification: Risk Management (required); see also 45 CFR 164.304 (definition of “Availability”). Emerging technologies such as health apps and wearable devices are not necessarily subject to the same privacy or security requirements.

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

IT Governance

JANUARY 23, 2024

Only 1 definitely hasn’t had data breached. Publicly disclosed data breaches and cyber attacks: full list This week, we’ve found 130,036,285 records known to be compromised, and 116 organisations suffering a newly disclosed incident. 96 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

JANUARY 16, 2024

Only 4 definitely haven’t had data breached. GB Rebekah Children’s Services Source (New) Non-profit USA Yes 2,805 Butte School District Source 1 ; source 2 (Update) Education USA Yes 2,658 Dignity Health Nevada St. 94 of them are known to have had data breached. Organisation(s) Sector Location Data breached?

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Hunton Privacy

SEPTEMBER 1, 2020

The Act also excludes from the definition of genetic data, “deidentified data,” as defined in the Act. Department of Health and Human Services pursuant to HIPAA and the HITECH Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

IT Governance

DECEMBER 19, 2023

Only 4 definitely haven’t had data breached. GB Heart of Texas Behavioral Health Network Source 1 ; source 2 (New) Healthcare USA Yes 63,776 Grupo Televisa Source (New) Telecoms Mexico Yes >60,000 The Teaching Company (Wondrium by The Great Courses) Source (New) Education USA Yes 60 GB Lunacon Construction Group, Corp. Wolasky P.A.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. The bill also makes a number of non-substantive changes to the California Consumer Privacy Act (“CCPA”)/CPRA.

Privacy 98

Privacy Insurance Security Data breaches 98

IG Guru

JANUARY 21, 2019

IG World & Institute for IG – The Leader in InfoGov Training Resources IG World Magazine & Institute for InfoGov Free “IG Academy” Educational Webinar Series Begins January 22 REGISTRATION IS NOW OPEN FOR OUR FREE WEBINAR TRAINING SERIES! Click HERE to register! 22 – Register Today!

Education 40

Education Information governance Government Information Security 40

IT Governance

FEBRUARY 27, 2024

None definitely haven’t had data breached. TB The Peddie School Source (New) Education USA Yes 1.2 Subscribe now The post The Week in Cyber Security and Data Privacy: 19 – 25 February 2024 appeared first on IT Governance UK Blog. 86 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Data breaches 52

Hunton Privacy

MARCH 5, 2015

The guidance, Protecting Student Privacy While Using Online Educational Services: Model Terms of Service, states that the TOS offered by providers of online educational services and mobile applications are often “Click Wrap” agreements requiring schools and districts to accept the TOS without an opportunity for negotiation.

Education 40

Education Privacy Metadata Compliance 40

IT Governance

JANUARY 30, 2024

Only 1 definitely hasn’t had data breached. based researchers and educators”. On top of that, we found out about the MOAB this week, affecting 3,876 organisations with more than 26 billion records breached. We’ve also found 6 organisations providing a significant update on a previously disclosed incident.

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

Hunton Privacy

MARCH 15, 2024

Clarify which negative impacts to consumers’ privacy a business may consider, including impairing consumers’ control over their personal information, such as by providing insufficient information for them to make an informed decision regarding the processing of their personal information.

Risk 61

Risk Artificial Intelligence Compliance Privacy 61

Collibra

NOVEMBER 2, 2020

The California Consumer Privacy Act (CCPA) came into effect four years after the General Data Protection Regulation (GDPR) was adopted. Despite coming at the heels of the GDPR, the recent California privacy law promptly established and defined its own concepts around consumer-related data. . What is personal information?

Privacy 59

Privacy Education Insurance GDPR 59

IT Governance

NOVEMBER 28, 2023

Only 3 definitely haven’t had data breached. The post The Week in Cyber Security and Data Privacy: 20 – 26 November 2023 appeared first on IT Governance UK Blog. 19 of them are known to have had data exfiltrated or exposed. We’ve also found 5 organisations providing a significant update on a previously disclosed incident.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Hunton Privacy

FEBRUARY 1, 2024

This follows the definition proposed by the European Parliament, which is aligned with the Organization for Economic Co-operation and Development’s definition of AI. Education and Vocational Training. The leaked text substantially diverges from the original proposal by the European Commission, which dates back to 2021.

Risk 114

Risk Education Artificial Intelligence Insurance 114

IT Governance

FEBRUARY 14, 2024

Only 2 definitely haven’t had data breached. Source New Defence USA Yes 1,051 Connecticut College Source New Education USA Yes 954 American Alarm & Communications Inc. Source New Professional services USA Yes 146 Community School of Naples Source New Education USA Yes 4 Software Systems, Inc.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Hunton Privacy

JULY 19, 2019

On July 17, 2019, the Federal Trade Commission published a notice in the Federal Register announcing an accelerated review of its Children’s Online Privacy Protection Rule (“COPPA Rule” or “Rule”), seeking feedback on the effectiveness of the 2013 amendments to the Rule, and soliciting input on whether additional changes are needed.

Education 78

Education Privacy IT Security 78

Hunton Privacy

NOVEMBER 2, 2021

Expanded Definition of “Financial Institution.” The Final Rule expands the definition of “financial institution” to include entities engaged in activities that the Federal Reserve Board determines to be incidental to financial activities, harmonizing the FTC’s Safeguards Rule with the safeguards rules of other federal agencies.

Information Security 101

Information Security Risk Compliance Data breaches 101