Data Protection Report

DECEMBER 23, 2019

This blogpost summarises our recent webinar: “ An urgent message from Berlin: The importance of record retention in privacy and cybersecurity ”. The authority claimed a violation of data minimisation and privacy by design principles under the EU General Data Protection Regulation (GDPR). . Why should this be a high priority project?

Privacy 144

Privacy Compliance Personal data Risk 144

Data Protection Report

JANUARY 6, 2020

The Court of Justice of the European Union (CJEU) will determine the validity of the EU Standard Contractual Clauses (SCCs) ( Data Protection Commissioner v Facebook Ireland Limited, Maximillan Schrems ) whilst the General Court of the EU will consider the future of Privacy Shield (La Quadrature du Net v Commission). In the U.S.,

Privacy 84

Privacy GDPR Data breaches Risk 84

Hunton Privacy

JULY 12, 2021

On June 30, 2021, the New York State Department of Financial Services (“NYDFS,” the “Department”) issued guidance to all New York state regulated entities on ransomware (the “Guidance”), identifying controls it expects regulated companies to implement whenever possible.

Ransomware 102

Ransomware Security Financial Services Cybersecurity 102

Data Protection Report

JANUARY 6, 2020

The Court of Justice of the European Union (CJEU) will determine the validity of the EU Standard Contractual Clauses (SCCs) ( Data Protection Commissioner v Facebook Ireland Limited, Maximillan Schrems ) whilst the General Court of the EU will consider the future of Privacy Shield (La Quadrature du Net v Commission). In the U.S.,

Privacy 52

Privacy GDPR Data breaches Risk 52

eSecurity Planet

SEPTEMBER 10, 2021

From the very beginning of the cloud computing era, security has been the biggest concern among enterprises considering the public cloud. In addition, 95 percent of survey respondents confirmed that they are extremely to moderately concerned about public cloud security. What is cloud security?

Cloud 106

Cloud Security Encryption Risk 106

The Last Watchdog

APRIL 3, 2019

The key security lesson is that an identity gets assigned to each and every RPA, creating fresh attack vectors. All these privacy regulations have a direct impact on IGA service, which help companies automate, as much as possible, governance processes, as a foundation proving compliance. Public trust must be maintained.

Digital transformation 140

Digital transformation Insurance Compliance Healthcare 140

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

eSecurity Planet

FEBRUARY 26, 2024

They’re particularly dangerous because it’s difficult for security or development teams to see an XSS vulnerability, and it’s also hard to see the effects of an attack until the ensuing breach is well underway. XSS attacks have multiple security and business risks, including credential theft and damaged company reputation.

Risk 97

Risk Financial Services Security Libraries 97

IT Governance

AUGUST 26, 2021

Protecting employees’ privacy. For example, financial services firms may be worried about employees breaching insider trading laws. Although monitoring software comes with understandable privacy issues, remember that the GDPR (General Data Protection Regulation) doesn’t prohibit their use. Preventing data breaches.

Compliance 119

Compliance Data breaches Privacy Risk 119

Data Protection Report

DECEMBER 23, 2019

This blogpost summarises our recent webinar: “ An urgent message from Berlin: The importance of record retention in privacy and cybersecurity ”. The authority claimed a violation of data minimisation and privacy by design principles under the EU General Data Protection Regulation (GDPR). . Why should this be a high priority project?

Privacy 52

Privacy Compliance Personal data Risk 52

Data Matters

DECEMBER 4, 2019

Cryptoassets cannot be physically possessed, so they cannot be the object of a bailment, and only some types of security can be granted over them. Cryptoassets are not documents of title, documentary intangibles or negotiable instruments, nor are they instruments under the UK Bills of Exchange Act nor goods under the UK Sale of Goods Act.

Blockchain 60

Blockchain Financial Services Healthcare Marketing 60

Data Matters

DECEMBER 4, 2019

Cryptoassets cannot be physically possessed, so they cannot be the object of a bailment, and only some types of security can be granted over them. Cryptoassets are not documents of title, documentary intangibles or negotiable instruments, nor are they instruments under the UK Bills of Exchange Act nor goods under the UK Sale of Goods Act.

Blockchain 60

Blockchain Financial Services Healthcare Marketing 60

eSecurity Planet

AUGUST 22, 2023

And breaches will occur – because bad guys make a living by figuring out ways to circumvent security best practices. Prioritize Data Protection The downfall of many security strategies is that they become too general and too thinly spread. But it requires different levels of security.

Data breaches 81

Data breaches Big data Cybersecurity Security 81

Thales Cloud Protection & Licensing

DECEMBER 20, 2023

This strategy addresses security concerns related to intellectual property and sensitive data in large language models (LLMs). This enhances data privacy and security and allows for greater control and efficiency in AI application deployment within the enterprise. This necessitates a shift in cybersecurity strategies.

Cybersecurity 83

Cybersecurity Blockchain Artificial Intelligence Encryption 83

Security Affairs

JANUARY 27, 2022

Millions of customers of large businesses have been left vulnerable to identity theft, thanks to a security flaw that exposes their personal data to illicit download. Among those affected are clients of Europcar, a vehicle rental service, and FxPro, a trading platform. ” -Mikail Tunç, a security researcher.

Personal data 85

Personal data Phishing Data breaches Passwords 85

Data Matters

JUNE 24, 2021

In the Order, the SEC alleges that First American’s disclosures concerning the vulnerability were deficient because senior executives were not provided all available and relevant information, specifically that First American’s information security personnel had identified and failed to remediate the vulnerability months earlier in January 2019.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Data Matters

APRIL 20, 2021

The Cybersecurity Guidance is directed at plan sponsors and fiduciaries regulated by the Employee Retirement Income Security Act of 1974 (ERISA) as well as plan participants and beneficiaries. Online Security Tips for plan participants and beneficiaries. Considerations for Plan Sponsors and Other Fiduciaries.

Cybersecurity 68

Cybersecurity Insurance Risk Compliance 68

Hunton Privacy

JULY 24, 2020

On Wednesday, July 22, the New York Department of Financial Services (the “NYDFS”) announced that it had filed administrative charges against First American Title Insurance Co. under the NYDFS Cybersecurity Regulation , marking the agency’s first enforcement action since the rules went into effect in March 2017.

Cybersecurity 85

Cybersecurity Risk Financial Services Insurance 85

Shoreline Records Management

AUGUST 21, 2023

With the advent of electronic health records (EHRs) and the increasing emphasis on data security and accessibility, the role of offsite medical records storage has become paramount, especially in the context of physicians’ responsibilities as they seek to close their practice.

Records Management 26

Records Management Paper Compliance Access 26

Data Protection Report

OCTOBER 1, 2019

Although California has recently captured the lion’s share of attention with respect to privacy and security, on October 23, 2019, New York’s amended security breach law goes into effect, and on March 1, 2020, new security safeguards go live (N.Y. Readers may recall that New York’s security breach notification law (N.Y.

Security 40

Security Financial Services Passwords Risk 40

Adam Levin

SEPTEMBER 5, 2019

So, we can call this a Facebook privacy facepalm legacy attack. It’s a sad state of Facebook privacy news fatigue that the urge is so strong to create privacy fail sub-categories—but there you have it. The information is at least a year old, which was when Facebook stopped allowing developers to have user phone numbers.

Mining 79

Mining Authentication Financial Services Privacy 79

Adam Levin

NOVEMBER 30, 2018

Regis, Westin, Sheraton, W Hotels or anywhere else that operates on Marriot’s Starwood guest reservation database, it’s time to redouble your cybersecurity and privacy efforts, because this compromise is one of biggest we’ve seen—dwarfed only by the Yahoo breach that affected 2 billion users. If you’ve made reservations at the St.

Financial Services 66

Financial Services Encryption Passwords Communications 66

The Last Watchdog

MARCH 14, 2022

When was the last time you read an online privacy policy in its entirety? Related: What happened to privacy in 2021. Financial services, health, home security, governance and all other mission critical services are now provided online. This document is called a privacy policy. Perhaps, never?

Privacy 223

Privacy Artificial Intelligence Financial Services Archiving 223

Data Matters

AUGUST 5, 2019

Together, the new laws require the implementation of reasonable data security safeguards, expand breach reporting obligations for certain types of information, and require that a “consumer credit reporting agency” that suffers a data breach provide five years of identity theft prevention services for impacted residents.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Data Matters

NOVEMBER 2, 2021

We will also discuss a developing range of services referred to as digital asset “prime brokerage” — describing the suite of services typically provided by these prime brokers and comparing them to traditional offerings of prime brokers in the securities space. Traditional OTC Derivatives.

Blockchain 88

Blockchain Marketing Access Risk 88

Data Matters

FEBRUARY 25, 2021

The FCA is proposing amendments to: the UK onshored versions of EU technical standards on strong customer authentication (SCA) and common and secure methods of communication (UK SCA-RTS); its Approach Document on Payment Services and Electronic Money (Approach Document); and. its Perimeter Guidance Manual (PERG).

Authentication 68

Authentication Paper Risk Insurance 68

ARMA International

DECEMBER 26, 2019

Forty percent are challenged by the volume of unmanaged digital documents out of the RIM program’s control. The top objection to using the cloud for digital records continues to be potential privacy or security concerns – no change from 2017. Automation’s impact on work processes will be profound.

Content services 76

Content services Cloud Records Management Privacy 76

Hunton Privacy

NOVEMBER 8, 2012

In its complaint , the FTC maintained that PLS Financial Services, Inc., In the settlement , the companies agreed to pay $101,500 and are enjoined from any future violations of the Disposal, Privacy and Safeguards Rules.

Financial Services 40

Financial Services Retail Privacy Compliance 40

Data Matters

MAY 21, 2020

Where a financial institution has made disclaimers or set forth its challenges in past SAR filings, FinCEN is not requiring the financial institution to correct those reports. Providing Supporting Documentation to Law Enforcement and FinCEN Timely When Requested. Secret Service field office.

e-Discovery 68

e-Discovery Government Cybersecurity Financial Services 68

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. IT governance and security.

Compliance 67

Compliance Risk Government Retail 67

Data Matters

JANUARY 25, 2018

In the aftermath of a significant data security incident, a best practice is to hire a third-party forensic firm, working at the direction of counsel, to review how the breach occurred, what data may have been accessed, whether the incident has ceased and other important issues directly relevant to legal counsel’s review. In Leibovic v.

Data breaches 60

Data breaches Communications Financial Services Privacy 60

HL Chronicle of Data Protection

MARCH 14, 2019

The Federal Trade Commission (“FTC”) issued notices on March 5 seeking public comment on proposed amendments to the regulations implementing the Gramm-Leach-Bliley Act (“GLBA”), commonly known as the Safeguards Rule and Privacy Rule. It includes general, high level elements of a security program, but lacks detailed security steps.

Privacy 40

Privacy Risk Cybersecurity Information Security 40

Hunton Privacy

NOVEMBER 10, 2016

The impetuses for the survey were the many significant changes the GDPR will bring to companies’ management and processing of personal data, their privacy compliance programs and their IT systems and infrastructure. The GDPR replaces Directive 95/46/EC and will become applicable in May 2018.

GDPR 45

GDPR Data Privacy Compliance Privacy 45

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. IT governance and security.

Compliance 57

Compliance Risk Government Retail 57

Hunton Privacy

AUGUST 15, 2013

On August 14, 2013, the Department of Health and Human Services (“HHS”) announced a resolution agreement and $1,215,780 settlement with Affinity Health Plan (“Affinity”) stemming from a security breach that affected approximately 350,000 individuals.

Security 40

Security Financial Services Risk IT 40

eSecurity Planet

AUGUST 10, 2023

Here are our picks for the top threat intelligence feeds that security teams should consider adding to their defensive arsenal: AlienVault Open Threat Exchange: Best for community-driven threat feeds FBI InfraGard: Best for critical infrastructure security abuse.ch

Cybersecurity 72

Cybersecurity Access Metadata Energy and Utilities 72

The Schedule

AUGUST 22, 2018

” The first speaker was Lauren Gaines from Thrivent Financial, which is a fraternal benefit society and Fortune 500 financial services organization. Perhaps one of the most interesting points she raised was about the potential impact of the new EU right to privacy rule. embracing automatic declassification.

Archiving 58

Archiving FOIA Records Management Compliance 58