Data Matters

AUGUST 5, 2019

The law broadens the definition of “private information” which sets forth the information elements that, if breached, could trigger a notification obligation. The Stop Hacks and Improve Electronic Data Security Act. To define “reasonable” safeguards, the statute provides examples of administrative, technical and physical safeguards.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Data Protection Report

OCTOBER 1, 2019

Law § 899-aa) differs from most states’ law in several ways including (1) using separate definitions of “personal information” and “private information;” and (2) providing factors to consider whether personal information had been acquired. Readers may recall that New York’s security breach notification law (N.Y.

Security 40

Security Financial Services Passwords Risk 40

Data Protection Report

JANUARY 6, 2020

The New York State Department for Financial Services regulations require covered entities to have appropriate record retention policies and procedures and the CCPA provides an extra incentive to implement proper information governance to minimise the costs data access requests. In the U.S., Conquer the world!

Privacy 84

Privacy GDPR Data breaches Risk 84

HL Chronicle of Data Protection

MARCH 14, 2019

Employee training. Under the proposed Rule, FIs would be required to provide personnel with security awareness training that is updated to reflect risks identified by the FI’s risk assessment.

Privacy 40

Privacy Risk Cybersecurity Information Security 40

Reltio

SEPTEMBER 24, 2019

Nicola Askham is the leading data governance training provider in the UK with over 16 years of experience and research in the field. She delivers training and consulting to major organisations to help them implement full data governance frameworks. I definitely think they have had an impact. Kate Tickner, Reltio.

Government 55

Government Digital transformation Big data IT 55

Collibra

MARCH 11, 2021

Here is an example of a financial services firm that overcame its data challenges and followed the data governance best practice of identifying data domains. . The company used Collibra as the system of engagement for managing all definitions and executing control processes, such as onboarding, approvals and capturing of feedback.

Government 59

Government Communications Insurance Customer Experience 59

DLA Piper Privacy Matters

AUGUST 23, 2021

Definition of Personal information and Sensitive Personal information “Personal information” means any kind of information relating to an identified or identifiable natural person, either electronically or otherwise recorded, but excluding information that has been de-identified or anonymised.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Data Protection Report

JANUARY 6, 2020

The New York State Department for Financial Services regulations require covered entities to have appropriate record retention policies and procedures and the CCPA provides an extra incentive to implement proper information governance to minimise the costs data access requests. In the U.S., Conquer the world!

Privacy 52

Privacy GDPR Data breaches Risk 52

DLA Piper Privacy Matters

JULY 30, 2019

Some states – such as Alabama, Massachusetts and New York (for financial services companies) – prescribe particular requirements of a “reasonable” cybersecurity program. At least nine states expressly extend these requirements to service providers. Proof of adequate cyber insurance coverage.

Data breaches 45

Data breaches Cybersecurity Financial Services Risk 45

Collibra

APRIL 11, 2022

Here is an example of a financial services firm that overcame its data challenges and followed the data governance best practice of identifying data domains. . The company used Collibra as the system of engagement for managing all definitions and executing control processes, such as onboarding, approvals and capturing of feedback.

Government 52

Government Communications Insurance Customer Experience 52

ARMA International

DECEMBER 26, 2019

Just 59% of surveyed RIM professionals are included in their company’s IT strategic planning, including activities such as requirements definition and vendor selection – down from 67% in 2017. Forty percent are challenged by the volume of unmanaged digital documents out of the RIM program’s control.

Content services 76

Content services Cloud Records Management Privacy 76

Data Matters

MARCH 21, 2022

The reporting requirements will cover multiple sectors of the economy, including chemical industry entities, commercial facilities, communications sector entities, critical manufacturing, dams, financial services entities, food and agriculture sector entities, healthcare entities, information technology, energy, and transportation.

Ransomware 97

Ransomware Cybersecurity Agriculture Communications 97

DLA Piper Privacy Matters

APRIL 26, 2021

Definition of AI system. The definition of an AI system is intended to be technology-neutral and future-proof, while providing legal certainty. a) The definition of a high-risk AI system. Providers are expected to co-operate by providing full access to training, validation and testing datasets etc. d) Sanctions.

Artificial Intelligence 114

Artificial Intelligence Risk Marketing GDPR 114

ForAllSecure

JANUARY 19, 2022

That's quite a narrow definition. What can they do within the workforce, although this sort of job and sort of landscape we try and work out what they can do, which is the definition of authorization, essentially, this is Simon, what can he do today? Vamosi: And it’s not just in the work environment. I use a password manager.

Passwords 52

Passwords Authentication Access Data breaches 52

IT Governance

JANUARY 16, 2024

Only 4 definitely haven’t had data breached. Publicly disclosed data breaches and cyber attacks: full list This week, we’ve found 249,142,212 records known to be compromised, and 108 organisations suffering a newly disclosed incident. 94 of them are known to have had data breached. Organisation(s) Sector Location Data breached?

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Data Protection Report

AUGUST 11, 2022

On July 29, 2022, the New York Department of Financial Services (NYDFS) announced a “pre-proposed outreach” of material proposed changes to almost every section of its cybersecurity regulations, and would affect each entity covered by the current regulations of 23 NYCRR Part 500. Cybersecurity Risk Assessments.

Cybersecurity 57

Cybersecurity Risk Passwords Compliance 57

IT Governance

JANUARY 23, 2024

Only 1 definitely hasn’t had data breached. The first chapter covers the lawful basis for training generative AI models on web-scraped data and is open until 1 March. 96 of them are known to have had data exfiltrated, exposed or otherwise breached. Organisation(s) Sector Location Data breached?

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

ForAllSecure

MAY 4, 2021

Duff: Yeah, so I mean pentesting by definition has a little bit of a difference, right, pen tests are more usually centered around where, how to exploit vulnerabilities to get in. Vamosi: This is more of a testing and training service of MITRE. And so what we do is we release the training free and open.

Government 52

Government IT Access Analytics 52

ForAllSecure

MAY 4, 2021

Duff: Yeah, so I mean pentesting by definition has a little bit of a difference, right, pen tests are more usually centered around where, how to exploit vulnerabilities to get in. Vamosi: This is more of a testing and training service of MITRE. And so what we do is we release the training free and open.

Government 52

Government IT Access Analytics 52