Remove category enforcement
article thumbnail

First American Financial Pays Farcical $500K Fine

Krebs on Security

NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. If you bought or sold a property in the last two decades or so, chances are decent that you also gave loads of personal and financial documents to First American.

Insurance 286
article thumbnail

Indiana Likely to Become Seventh State to Enact a Comprehensive State Privacy Law

Hunton Privacy

The bill also contains a number of exemptions, including exceptions for financial institutions, affiliates, and data subject to Title V of the Gramm-Leach-Bliley Act, covered entities and business associates under the Health Insurance Portability and Accountability Act of 1996, nonprofit organizations and institutions of higher education.

Privacy 132
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Delaware Could Become the 13th State to Enact a Comprehensive State Privacy Law

Hunton Privacy

The DPDPA also contains a number of exemptions, including exceptions for financial institutions, affiliates and data subject to Title V of the Gramm-Leach-Bliley Act, covered entities and business associates under the Health Insurance Portability and Accountability Act of 1996 and nonprofit organizations.

Privacy 52
article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

See the Top Governance, Risk and Compliance (GRC) Tools. Relatedly, PIPL outlines some categories of sensitive information that do not receive additional protection under GDPR. This is where compliance software can come in handy for keeping track of, maintaining, and enforcing IT security and data privacy policies.

article thumbnail

Oregon Consumer Privacy Act

Hunton Privacy

The OCPA provides an exemption to personal data subject to the Gramm-Leach-Bliley Act, the Health Insurance Portability and Accountability Act, and a number of other federal laws. Enforcement The OCPA does not contain a private right of action. The OCPA provides exclusive enforcement authority to the Oregon Attorney General.

Privacy 52
article thumbnail

ICO issue fine of £4.4 to Interserve for security failings

DLA Piper Privacy Matters

A phishing email was sent to a group employee which was designed to appear as though the attached document needed urgent action. The databases also held special category personal data including ethnic origin; religion; details of disabilities; sexual orientation, and health information relevant to ill-heath retirement applications.

article thumbnail

The Impact of Data Protection Laws on Your Records Retention Schedule

ARMA International

The records retention schedule is the foundational document for a records management program. These records are typically organized by grouping them by function or department and then described as either an individual record or grouped together into a record category. resumes, personnel files, video/call recordings). 2 DLA Piper.