Data Matters

SEPTEMBER 20, 2021

The National Association of Insurance Commissioners (NAIC) held its Summer 2021 National Meeting (Summer Meeting) August 14-17, 2021. Highlights include, among others, adoption of revised risk-based capital bond factors for life insurers, amendments to SSAP No. NAIC Adopts Revised Risk-Based Capital Bond Factors for Life Insurers.

Insurance 88

Insurance e-Delivery Paper Sales 88

Data Matters

AUGUST 9, 2021

As stated in the Attorney Generals Press Release, the Act includes provisions on notification of data breaches to impacted individuals and regulators and changes the former notification deadline for “individuals and the Office of the Attorney General…from 90 days to 60 days, which is in line with recent amendments passed in other states.”.

Data breaches 88

Data breaches Privacy Personal data Data Privacy 88

Collibra

NOVEMBER 2, 2020

The California Consumer Privacy Act (CCPA) came into effect four years after the General Data Protection Regulation (GDPR) was adopted. It may also lead to inconsistent definitions of personal information, thus complicating the process of retrieving personal information for privacy use cases. What is personal information?

Privacy 59

Privacy Education Insurance GDPR 59

Data Protection Report

MARCH 7, 2024

Approximately at the same time as the Executive Order that we described in Part 1 was issued, the Attorney General (AG) unofficially released 90 pages of Advanced Notice of Proposed Rulemaking (ANPRM), which will become official once published in the Federal Register. What is included in the special category of “government related data”?

Access 59

Access Military Compliance Personal data 59

IT Governance

NOVEMBER 28, 2023

This week, we’re taking a slightly different approach with the ‘publicly disclosed data breaches and cyber attacks’ category, presenting the most interesting data points in a table format. The ‘enforcement’ and ‘other news’ categories remain unchanged. Only 3 definitely haven’t had data breached.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

IT Governance

DECEMBER 19, 2023

We’re also introducing two new categories this week: ‘AI’ and ‘Key dates’. An investigation determined that personal data, including names, addresses, phone numbers, Social Security numbers, dates of birth and bank account numbers, belonging to nearly 15 million people was obtained by an unauthorised party between 30 October and 1 November.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Data Matters

DECEMBER 23, 2020

Federal Deposit Insurance Corporation (FDIC) approved and the federal banking agencies jointly announced on December 18 a notice of proposed rulemaking, Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers (NPR). On December 15, 2020, the U.S.

Security 68

Security Cybersecurity Insurance Communications 68

Data Matters

APRIL 10, 2020

On March 11, 2020, the California Attorney General (“AG”) released the third turn of proposed California Consumer Privacy Act (“CCPA”) regulations. Language from an earlier draft that prompted widespread use of granular charts to repeatedly reiterate information per category of personal information has not made a reappearance.

Privacy 68

Privacy Sales Insurance Compliance 68

KnowBe4

APRIL 25, 2023

Fast Company described how Auto-GPT and BabyAGI are bringing generative AI to the masses. In general terms, autonomous agents can generate a systematic sequence of tasks that the LLM works on until it has satisfied a preordained "goal." Security researchers are jailbreaking large language models to get around safety rules.

Insurance 72

Insurance Security awareness Phishing Ransomware 72

Data Protection Report

MAY 17, 2019

561, the “Attorney General amendment” to the California Consumer Privacy Act (“CCPA”). The bill would have made three significant changes to the CCPA: It would have expanded the consumer’s private right of action from only certain security breaches to any violation of the CCPA. Excludes “employees” from definition of “consumer”.

Retail 40

Retail Privacy Insurance Manufacturing 40

Data Matters

DECEMBER 20, 2019

The National Association of Insurance Commissioners (the NAIC) held its Fall 2019 National Meeting (Fall Meeting) in Austin, Texas, from December 7 to 10, 2019. NAIC Advances Accreditation Standard Process for Revised Credit for Reinsurance Model Law and Regulation, and Term and Universal Life Insurance Reserve Financing Model Regulation.

Insurance 60

Insurance Risk Artificial Intelligence Privacy 60

Data Matters

DECEMBER 20, 2019

The National Association of Insurance Commissioners (the NAIC) held its Fall 2019 National Meeting (Fall Meeting) in Austin, Texas, from December 7 to 10, 2019. NAIC Advances Accreditation Standard Process for Revised Credit for Reinsurance Model Law and Regulation, and Term and Universal Life Insurance Reserve Financing Model Regulation.

Insurance 60

Insurance Risk Artificial Intelligence Privacy 60

Data Matters

DECEMBER 28, 2020

The National Association of Insurance Commissioners (NAIC) held its Fall 2020 National Meeting (Fall Meeting) December 3-9, 2020. NAIC Adopts the Group Capital Calculation Template and Instructions and Related Revisions to the Insurance Holding Company Act. Insurance groups will be exempt from filing a GCC if. groups to non-U.S.

Insurance 68

Insurance Paper Risk Analytics 68

Data Matters

JULY 28, 2021

Polis urged Colorado’s General Assembly to “strike the appropriate balance between consumer protection while not stifling innovation and Colorado’s position as a top state to do business.”. Applicability and Definitions. After signing the CPA into law, Gov. ” Additionally, Gov. ” Additionally, Gov. Despite Gov.

Privacy 88

Privacy Sales Personal data Compliance 88

Data Matters

OCTOBER 23, 2019

Businesses, consumer advocates, and privacy watchers have thus been eagerly waiting for over a year for the Attorney General to propose the regulations the CCPA requires him to promulgate. As laid out below, the nature and breadth of the Attorney General’s proposed regulations explain why they took so long to produce.

Sales 60

Sales Privacy Passwords Compliance 60

Data Matters

JUNE 26, 2018

6 general election ballot. Many see the law as having echoes of the new European General Data Protection Regulation (GDPR) that went into effect on May 25. The CCPA also exempts data covered by Health Insurance Portability and Accountability Act and consumer report data governed by the Fair Credit Reporting Act. biometric data.

Privacy 60

Privacy GDPR Sales Data breaches 60

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. NAIC Considers Comments to the Group Capital Calculation Template and Instructions and Related Revisions to the Insurance Holding Company Act . GCC Template and Instructions.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

Data Protection Report

FEBRUARY 21, 2018

The proposed bill overlaps with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and state privacy laws. The amended bill further expands the definition of “personal information” to include student, military, or passport identification numbers.

Data Privacy 40

Data Privacy Privacy Military Insurance 40

Data Protection Report

JULY 9, 2018

states have recently introduced and passed legislation to expand data breach notification rules and to mirror some of the protections provided by Europe’s newly enacted General Data Protection Regulation (“GDPR”). On the security front, as of March 2018, all 50 U.S. Several U.S. See our previous blog posts on GDPR here and here.

GDPR 40

GDPR Data breaches Personal data Insurance 40

Data Matters

AUGUST 5, 2019

Together, the new laws require the implementation of reasonable data security safeguards, expand breach reporting obligations for certain types of information, and require that a “consumer credit reporting agency” that suffers a data breach provide five years of identity theft prevention services for impacted residents.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. The definition of personal information under AB 375 is expansive.

GDPR 79

GDPR Privacy Sales Data breaches 79

Data Protection Report

JULY 8, 2019

The issue giving rise to the financial penalty was a security breach relating to the company’s website notified by a user to the CNIL on 12 August 2018. According to SERGIC, the website’s security breach could have impacted around 29,440 users.

GDPR 40

GDPR Personal data Compliance Security 40

DLA Piper Privacy Matters

DECEMBER 3, 2021

There are also new requirements around transfers of data outside of the UAE and requirements to keep data secure, and to notify the new data protection regulator, and in some circumstances data subjects, of data breaches. Definitions. What does the PDPL cover and who does it apply to? Data protection officers (“ DPO ”).

Personal data 105

Personal data Data breaches GDPR Compliance 105

Privacy and Cybersecurity Law

NOVEMBER 8, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA’s definition of “consumer” is equally broad. This definition therefore not only encompasses a “consumer” in the traditional sense (i.e.,

Privacy 58

Privacy Sales Compliance Cybersecurity 58

Data Matters

JUNE 29, 2018

According to the bill’s author, it was consciously designed to emulate the new European General Data Protection Regulation (GDPR) that went into effect on May 25, and if and when it goes into effect, it would constitute the broadest privacy law in the United States. The definition of personal information under AB 375 is expansive.

GDPR 60

GDPR Privacy Sales Data breaches 60

DLA Piper Privacy Matters

AUGUST 23, 2021

Definition of Personal information and Sensitive Personal information “Personal information” means any kind of information relating to an identified or identifiable natural person, either electronically or otherwise recorded, but excluding information that has been de-identified or anonymised.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Privacy and Cybersecurity Law

NOVEMBER 9, 2018

California law also requires businesses that suffer a breach of security to disclose the breach to consumers, and in some instances law enforcement, if sensitive information is compromised. The CCPA’s definition of “consumer” is equally broad. This definition therefore not only encompasses a “consumer” in the traditional sense (i.e.,

Privacy 58

Privacy Sales Education Compliance 58

Data Protection Report

JUNE 6, 2019

Although the concept of providing consumers certain privacy rights is similar, the law has some significant differences from the CCPA, including the definition of “sale”. Excludes “employees” from definition of “consumer”. Expands definition of “de-identified” data, narrows definition of “personal information”.

Sales 40

Sales Privacy Insurance Manufacturing 40

DLA Piper Privacy Matters

MAY 14, 2018

The Italian Board of Ministers issued the final text of the legislative decree integrating the EU General Data Protection Regulation. The uncertainty is due to the fact that the provisions of the GDPR referring to data processors definitely are drafted having in mind entities and individuals outside the data controller’s organization.

GDPR 45

GDPR Privacy Systems administration Compliance 45

HL Chronicle of Data Protection

JUNE 3, 2019

Although the sale opt-out right sounds similar to the one in the CCPA, key definitions in SB-220 significantly limit the scope of its opt-out right. Several key definitions and exceptions for SB-220 are included below. Operators are also required to establish a designated request address (i.e.,

Sales 40

Sales Privacy Insurance Manufacturing 40

Data Matters

MARCH 4, 2021

The VCDPA, which will not enter into effect until January 1, 2023, borrows heavily from the California Consumer Privacy Act (CCPA) and the European Union (EU) General Data Protection Regulation (GDPR). the categories of personal data that the controller shares with third parties, if any. Controllers must. 6501 et seq.). 574(C)-(E).

Personal data 74

Personal data GDPR Sales Privacy 74

Robert's Db2

JULY 28, 2023

SQL statements prepared by Db2 for execution when initially issued by a program, versus statements that are pre-prepared for execution via a Db2 process known as "bind"), or about the use of "generic" (i.e., Using Db2's REST interface does not involve compromising performance, security or scalability , so I'd say use it when it makes sense.

Archiving 62

Archiving Access Insurance IT 62

Data Protection Report

OCTOBER 11, 2019

On October 10, 2019, with just weeks to go until the law goes into effect, the California Attorney General released the long-awaited draft regulations for the California Consumer Privacy Act (CCPA). The Attorney General will hold public hearings in four California cities during the first week of December to hear comments.

Sales 40

Sales Retail Privacy Access 40

Data Protection Report

MAY 23, 2018

The wait is finally over—this Friday the European Union General Data Protection Regulation (GDPR) will come into force. Cyber liability insurance policies, for example, should still provide cover in respect of liabilities arising under the law pre-GDPR even though that law is no longer current. Will GDPR become a global standard?

GDPR 40

GDPR Personal data Compliance Data breaches 40

Data Protector

OCTOBER 11, 2017

In our manifesto at the general election we committed to provide people with the ability to require major social media platforms to delete information held about them, especially when that information related to their childhood. How then will we secure adequacy without adhering to the charter? Data is used to build products themselves.

GDPR 120

GDPR Personal data Government IT 120

ARMA International

SEPTEMBER 27, 2021

Thus, common tools and techniques are risk matrices, risk registers, risk logs, risk breakdown structures, risk categories, Monte Carlo simulations, and sensitivity analyses. The business case must provide the rationale for the initiative, the problem definition, the current state, and the vision of the future state, for example.

Digital transformation 54

Digital transformation Risk IT Computer and Electronics 54