Definition Encryption Events Insurance 
Data Matters
JANUARY 14, 2019
On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”.
Data Matters
FEBRUARY 11, 2019
On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
IBM Big Data Hub
JANUARY 22, 2024
The good news is that in the event of a ransomware attack, there are basic steps any organization can follow to help contain the attack, protect sensitive information, and ensure business continuity by minimizing downtime. Notify the security team Once you’ve disconnected the affected systems, notify your IT security team of the attack.
Schneier on Security
FEBRUARY 28, 2024
In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion. 11, 2001, terrorist attacks.
Data Matters
MARCH 12, 2019
Of particular note, the Safeguards Rule NPRM proposes to align the FTC’s requirements with those of the New York Department of Financial Services (“NYDFS”), as found in its cybersecurity regulations, and the National Association of Insurance Commissioners (“NAIC”), as found in its insurance data security model law.
eSecurity Planet
SEPTEMBER 10, 2021
For ransomware attacks where network data gets encrypted , backups are the definitive method for restoring network infrastructure. In the event of a ransomware attack, an organization could lose access to part or all of its network data and systems, blocking further work. Beyond Encryption: Exfiltration and Extortion.
DLA Piper Privacy Matters
OCTOBER 20, 2017
Guidance on where notification may not be required is provided, for example where: (i) the compromised data is already in the public domain; (ii) if the data is securely encrypted; or (iii) availability is not compromised because the controller has access to other sources of the data. This is a helpful clarification.
Expert insights. Personalized for you.
68 
Let's personalize your content