Collibra

MARCH 11, 2021

Data governance is a very intricate field, so implementing and sustaining data governance comes with a suite of challenges. Luckily, thousands, if not millions, of organizations use data governance to improve their operations, so you can learn from others’ mistakes and successes. Focus on the operating model.

Government 59

Government Communications Insurance Customer Experience 59

Collibra

APRIL 11, 2022

Data governance is a very intricate field, so implementing and sustaining data governance comes with a suite of challenges. Luckily, thousands, if not millions, of organizations use data governance to improve their operations, so you can learn from others’ mistakes and successes. What are data governance best practices?

Government 52

Government Communications Insurance Customer Experience 52

Collibra

APRIL 1, 2021

Data governance is the essential foundation for organizations looking to create business value from data. Setting up effective data governance, however, can be quite challenging. What is an operating model in data governance? The operating model is the basis for any data governance program. Operating model example.

Government 76

Government Digital transformation Communications Retail 76

Data Protection Report

OCTOBER 3, 2021

The amendment: Expands the definition of “personal information”; Shortens the notification deadline after discovery of a breach from 90 to 60 days; Removes the requirement to consult with law enforcement as part of a risk assessment; Deems compliant any person subject to and in compliance with HIPAA and HITECH; and.

Data breaches 142

Data breaches IT Insurance Passwords 142

IT Governance

APRIL 3, 2019

US food giant Mondelez is suing insurance company Zurich American for denying a $100 million (£76 million) claim filed after the NotPetya attack. The UK government and the CIA blame the attack on Russian state-sponsored hackers, claiming it was the latest act in an ongoing feud between Russia and Ukraine. Was NotPetya an act of war?

Insurance 53

Insurance Ransomware Government Paper 53

Collibra

DECEMBER 1, 2020

However, once you have a system of record in place for your data, your organization can implement many valuable data governance use cases more easily. . In this post, we’ll highlight the top three most valuable data governance use cases. Each one depends on a data governance and stewardship function already being in place.

Government 59

Government Analytics Marketing Unstructured data 59

Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion. 11, 2001, terrorist attacks.

Insurance 86

Insurance Government Cybersecurity Risk 86

IT Governance

NOVEMBER 3, 2023

Sector overview Most-breached sectors (by number of incidents) # Sector Incidents 1 Other 34 30% 2 Healthcare 31 27% 3 Education 16 14% 4 (tie) Media and telecoms 12 11% 4 (tie) Public and non-profit 12 11% 6 Legal 5 4% 7 Finance and insurance 4 4% Note: The percentages add up to 101% due to rounding.

Data breaches 87

Data breaches Insurance Ransomware Education 87

Hunton Privacy

AUGUST 2, 2021

In passing the law, Connecticut joins a number of other states in expanding the definition of “personal information” in its data breach notification statute. requiring “preliminary substitute notice” to individuals if a business cannot provide direct notification within the 60-day notification timeframe. Cybersecurity Safe Harbor (HB 6607).

Cybersecurity 87

Cybersecurity Insurance Military Data Privacy 87

The Last Watchdog

APRIL 3, 2019

Identity governance and administration, or IGA , has suddenly become a front-burner matter at many enterprises. Related: Identity governance issues in the age of digital transformation. Not only is the notion of what comprises a perimeter shifting, the definition of what constitutes a “user” is metamorphizing, as well.

Digital transformation 104

Digital transformation Insurance Compliance Healthcare 104

Hunton Privacy

SEPTEMBER 1, 2020

Not disclosing, subject to specified exceptions, a consumer’s genetic data to certain entities ( e.g. , those responsible for making decisions regarding health insurance, life insurance or employment). The Act also excludes from the definition of genetic data, “deidentified data,” as defined in the Act.

Privacy 85

Privacy Insurance Marketing Information governance 85

Hunton Privacy

JUNE 22, 2020

The amendments to Vermont’s Security Breach Notice Act include expanding the definition of Personally Identifiable Information (“PII”), expanding the definition of a breach to include login credentials and narrowing the permissible circumstances under which substitute notice may be used.

Data breaches 107

Data breaches Privacy Education Data Privacy 107

eSecurity Planet

AUGUST 9, 2022

See the Top Governance, Risk and Compliance (GRC) Tools. are subject to laws such as the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (the HITECH Act), as well as regulations such as the Clinical Laboratory Improvements Amendments (CLIA).

Data Privacy 141

Data Privacy Compliance Privacy Security 141

eSecurity Planet

DECEMBER 7, 2023

For example, The Health Insurance Portability and Accountability Act (HIPAA) requires security features such as encryption to protect patients’ health information. Pressure on both professional and personal encryption can also be seen in government legislation.

Encryption 100

Encryption IT Passwords IoT 100

Hunton Privacy

MAY 10, 2022

The CTDPA exempts certain entities, including, for example, state and local government entities, nonprofits, higher education institutions, financial institutions subject to the Gramm-Leach-Bliley Act (“GLB”), and qualifying covered entities and business associates subject to the Health Insurance Portability and Accountability Act (“HIPAA”).

Privacy 118

Privacy Personal data Sales B2B 118

erwin

MARCH 30, 2020

Managing and Governing Data From Lots of Disparate Sources. This data will be collected from organizations such as, the World Health Organization (WHO), the Centers for Disease Control (CDC), and state and local governments across the globe. These numerous data types and data sources most definitely weren’t designed to work together.

Metadata 122

Metadata IT Healthcare Government 122

IT Governance

JANUARY 9, 2024

million people was compromised, including names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, medical information, health insurance information, and billing and claims information. Only 1 definitely hasn’t had data breached. Information relating to nearly 4.5 Data breached: 4,452,782 records.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Krebs on Security

AUGUST 27, 2020

Ngo’s cooperation with the government ultimately led to 20 arrests, with a dozen of those defendants lured into the open by O’Neill and other Secret Service agents posing as Ngo. But based on the records they did have, the government estimated that Ngo’s service enabled approximately $1.1

Retail 311

Retail Government Access Insurance 311

Data Matters

AUGUST 24, 2018

The National Association of Insurance Commissioners (NAIC) held its Summer 2018 National Meeting in Boston, Massachusetts, from August 4 to 7, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data . The NAIC is also considering insurers’ use of big data in underwriting life insurance products.

Insurance 60

Insurance Big data e-Delivery Risk 60

Data Protection Report

FEBRUARY 23, 2023

Impact of New Privacy Laws On June 16, 2022, the federal government introduced Bill C-27, also known as the Digital Charter Implementation Act , 2022. The meaning of “high-impact” is still not clear and it is anticipated that the definition of “high-impact” will be provided in further regulation.

Privacy 85

Privacy Manufacturing Artificial Intelligence Data collection 85

Data Matters

SEPTEMBER 4, 2019

The National Association of Insurance Commissioners (NAIC) held its Summer 2019 National Meeting (Summer Meeting) in New York City from August 3 to 6, 2019. NAIC Evaluating Definition of “Best Interest” to Determine Whether to Impose Such a Standard in the Suitability in Annuity Transactions Model Regulation.

Insurance 68

Insurance Paper Risk Analytics 68

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. NAIC Considers Comments to the Group Capital Calculation Template and Instructions and Related Revisions to the Insurance Holding Company Act . GCC Template and Instructions.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

eSecurity Planet

FEBRUARY 14, 2023

Growth has definitely been robust. First of all, cybersecurity is becoming a “must have” for businesses and governments. The growing number of data privacy regulations has raised the potential consequences of cybersecurity breaches, spurring demand for GRC (governance, risk, and compliance) software.

Compliance 98

Compliance Security Cybersecurity Marketing 98

ARMA International

APRIL 18, 2022

The purpose of this article is to remove the fear and intimidation of domestic and global data protection laws and show how these laws and requirements are consistent with the existing objectives of your records retention schedule and information governance policy. Definition and Purpose of a Records Retention Schedule.

Personal data 99

Personal data GDPR Privacy Records Management 99

Data Matters

DECEMBER 11, 2018

The National Association of Insurance Commissioners (NAIC) held its Fall 2018 National Meeting (Fall Meeting) in San Francisco, California, from November 15 to 18, 2018. NAIC Continues its Evaluation of Insurers’ Use of Big Data. systemic risk of insurers with other parts of the financial system, notably the banking.

Insurance 68

Insurance Paper Risk Big data 68

HL Chronicle of Data Protection

APRIL 24, 2019

AB 25 would modify the definition of “consumer” to exclude certain employment-related information. It would also refine the definition of “personal information” to remove the term “household” from the definition as well as the expansive formulation “is capable of being associated with.”.

Insurance 40

Insurance Privacy Manufacturing Sales 40

Data Protection Report

AUGUST 16, 2017

On the 7 th August 2017, the UK’s Government Department for Digital, Culture, Media and Sport issued a Statement of Intent (the Statement ) outlining its planned reforms of the UK’s data protection laws which are to be implemented by the Data Protection Bill (the Bill ).

Government 40

Government GDPR Personal data Insurance 40

HL Chronicle of Data Protection

OCTOBER 8, 2018

Managing the interaction of these new requirements with existing obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), California’s Confidentiality of Medical Information Act (CMIA), and other health privacy laws will continue to be an area of focus in the health privacy community for years to come.

Privacy 45

Privacy Healthcare Sales Insurance 45

Hunton Privacy

MAY 7, 2019

This bill also would revise the definition of “deidentified.”. AB 874 : would create a clear and full public record exemption from the definition of “personal information.” AB 1355 : would amend the CCPA to exclude consumer information that is deidentified or aggregate consumer information from the definition of “personal information.”

Privacy 53

Privacy Insurance Sales Government 53

IT Governance

APRIL 23, 2019

The information comprised names, addresses, gender, dates of birth, phone numbers, National Insurance numbers, bank details and salaries. That obviously won’t come into play here as the leak occurred before the GDPR took effect, but a definitive ruling one way or the other will determine whether we will see more class actions in the future.

Data breaches 82

Data breaches Insurance GDPR Compliance 82

HL Chronicle of Data Protection

OCTOBER 8, 2018

Managing the interaction of these new requirements with existing obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), California’s Confidentiality of Medical Information Act (CMIA), and other health privacy laws will continue to be an area of focus in the health privacy community for years to come.

Privacy 40

Privacy Healthcare Sales Insurance 40

Data Protection Report

APRIL 24, 2019

2 of 2019 Concerning the Use of Information and Communication Technology in the Area of Health (the Healthcare Data Law ), which governs the use of health data and information generated in the UAE. In March of this year, the UAE issued Law No. The law takes effect three months after issuance. Health Data and Information inside the UAE.

Insurance 40

Insurance Communications Access Government 40

HL Chronicle of Data Protection

OCTOBER 8, 2018

Managing the interaction of these new requirements with existing obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), California’s Confidentiality of Medical Information Act (CMIA), and other health privacy laws will continue to be an area of focus in the health privacy community for years to come.

Privacy 40

Privacy Healthcare Sales Insurance 40

IT Governance

NOVEMBER 28, 2023

Only 3 definitely haven’t had data breached. The post The Week in Cyber Security and Data Privacy: 20 – 26 November 2023 appeared first on IT Governance UK Blog. 19 of them are known to have had data exfiltrated or exposed. We’ve also found 5 organisations providing a significant update on a previously disclosed incident.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Hunton Privacy

JUNE 14, 2018

Among other provisions, the Bill (1) amends the state’s data breach notification law to require notice to affected Colorado residents and the Colorado Attorney General within 30 days of determining that a security breach occurred, imposes content requirements for the notice to residents and expands the definition of personal information; (2) establishes (..)

Data breaches 65

Data breaches Security Passwords Military 65

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. Only 2 definitely haven’t had data breached. 184 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Data Matters

APRIL 10, 2020

Here are some of the highlights from the AG’s March 2020 revisions to the proposed regulations: Removal of guidance about the interpretation of CCPA definitions (§ 999.302 in the February 2020 proposed regulations). through their websites) to a particular consumer or household.

Privacy 68

Privacy Sales Insurance Compliance 68