Record Nations

JUNE 20, 2023

No matter the industry or company, the Human Resources Department is tasked with handling some of the most sensitive documents a company produces. From personnel files, to NDAs, to healthcare information, the list is long and filled with privacy and regulatory concerns.

Privacy 75

Privacy 75

Schneier on Security

SEPTEMBER 21, 2023

Jake Appelbaum’s PhD thesis contains several new revelations from the classified NSA documents provided to journalists by Edward Snowden. At this point, those documents are more historical than anything else. Nothing major, but a few more tidbits. Kind of amazing that that all happened ten years ago.

Archiving 103

Archiving IT Paper Privacy 103

Data Breach Today

OCTOBER 23, 2023

HHS OCR Guides Spotlight Sanctions for Insiders; Telehealth Privacy, Security Risks Federal regulators issued new guidance materials for HIPAA-regulated entities, including a document stressing the importance of sanction policies for workforce members who violate HIPAA, plus two new resources for healthcare providers and patients regarding telehealth (..)

Privacy 271

Privacy Risk Security 271

Hunton Privacy

OCTOBER 27, 2023

On October 17, 2023, the Office of the Privacy Commissioner of Canada (“OPC”) announced the release of two companion documents that provide further guidance on protecting the privacy of young people.

Privacy 72

Privacy Access IT Information Security 72

Data Matters

SEPTEMBER 6, 2022

Privacy never sleeps in California. In recent days and as California’s legislative session comes to a close, there have been a number of significant legislative and regulatory developments in the state, each of which will likely (again) change the privacy landscape in California and, by extension, the rest of the country.

Privacy 197

Privacy B2B Sales Compliance 197

ARMA International

MARCH 18, 2024

Highly regulated industries have even more of a recordkeeping burden, but those should be documented as well. Then it is up to the records manager to query the owners to determine the expected need for retention and document that reasoning for future records managers.

Records Management 52

Records Management Metadata Data Privacy GDPR 52

IT Governance

NOVEMBER 8, 2018

An integral part of EU GDPR (General Data Protection Regulation) compliance is producing appropriate documentation. If you are classified as a data controller under the GDPR, this includes creating a privacy notice that informs data subjects of your corporate privacy policy. When should you provide a GDPR privacy notice?

GDPR 76

GDPR Privacy Compliance Personal data 76

Data Protection Report

AUGUST 24, 2021

Given global trends in the development of privacy laws and enforcement, Canada and several provinces are looking at modernizing their respective privacy regimes. Ontario’s new proposed privacy law, which would govern commercial activities more broadly than current legislation (i.e., support innovation in Ontario.

Privacy 141

Privacy Paper Compliance Government 141

Security Affairs

MAY 30, 2021

Researchers disclosed two new attack techniques that allow modifying visible content on certified PDF documents without invalidating the digital signature. The attacks are documented in CVE-2020-35931 , CVE-2021-28545 , and CVE-2021-28546. ed document by inserting annotations that include malicious code.

Privacy 112

Privacy Security IT Cybersecurity 112

Hunton Privacy

JULY 8, 2022

Department of Health and Human Services (“HHS”) issued two guidance documents to “help protect patients seeking reproductive health care, as well as their providers” following the Supreme Court’s decision in Dobbs vs. Jackson Women’s Health Organization. On June 29, 2022, the U.S.

Privacy 107

Privacy Communications Encryption Security 107

Hunton Privacy

NOVEMBER 15, 2023

The Australian legislature increased maximum penalties for ‘serious’ contraventions of the Privacy Act with effect from December 2022 to at least A$50 million. The Allegations in the Case The originating documents are not yet publicly available. If made out, this would be a breach of Australian Privacy Principle 11.1.

Data breaches 128

Data breaches Privacy Risk Information Security 128

Data Protection Report

OCTOBER 24, 2022

Privacy and cybersecurity practices of target companies are being increasingly scrutinized throughout the due diligence process in M&A transactions. Sellers can expect buyers to seek to allocate this risk within the representations and warranties and related indemnification obligations in their deal documentation.

Privacy 121

Privacy Cybersecurity Risk Compliance 121

IT Governance

MARCH 8, 2018

An integral part of your EU General Data Protection Regulation (GDPR) compliance project is producing appropriate documentation, which includes a privacy notice. How does a privacy notice differ from a data protection policy? It should be a clear and concise document that is accessible by individuals. Free of charge.

GDPR 76

GDPR Privacy Compliance Marketing 76

Hunton Privacy

JANUARY 19, 2024

On January 16, 2024, Governor Phil Murphy signed into law Bill 332 , making New Jersey the 14 th state with a comprehensive state privacy law. In line with the CCPA and other state privacy laws, the New Jersey law broadly defines “sale” as the disclosure of personal data to a third party for “monetary or other valuable consideration.”

Privacy 97

Privacy Personal data Sales Risk 97

The Last Watchdog

JANUARY 27, 2022

Lack of documented evidence. Besides asking for more detailed documentation on past incidents and known system vulnerabilities, you should implement a zero trust security framework with an Identity & Access Management (IAM) solution. The transition process needs to account for: •Data privacy, ownership, and governance.

Privacy 233

Privacy Security Risk Marketing 233

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. GDPR-style data privacy laws came to the U.S. with the California Consumer Privacy Act (CCPA) effective Jan.

Data Privacy 138

Data Privacy Compliance Privacy Security 138

DLA Piper Privacy Matters

FEBRUARY 2, 2023

Author: Keri Bennett As of February 1, 2023, two new sections of the British Columbia Freedom of Information and Protection of Privacy Ac t (“ FIPPA ”) and associated regulations are in force. What is a privacy breach? Public bodies will also be required to provide notice to the Office of the Information & Privacy Commissioner.

Privacy 52

Privacy Compliance Education Government 52

DLA Piper Privacy Matters

NOVEMBER 3, 2022

Anyone with a passing interest in Australian privacy laws will no doubt have heard about the Optus data breach. The incident, which was made public in late September 2022, is thought to have affected around 9 million individuals (almost 40% of the Australian population), with identity documents relating to approximately 2.22

Privacy 97

Privacy Data breaches Insurance Government 97

IG Guru

AUGUST 5, 2020

A High-Level Visual of the Schrems II JudgmentMost likely, privacy pros will need to have conversations with non-privacy business colleagues in their company regarding the impact of Schrems II as data transfers are at risk. The post Privacy Expert Posts Infographic about Shcrems II and Privacy Shield appeared first on IG GURU.

Privacy 95

Privacy Compliance Risk GDPR 95

Hunton Privacy

JULY 13, 2022

The Executive Order aims, in part, to “ [p]rotect[] the privacy of patients and their access to accurate information” regarding reproductive health care services.

Privacy 112

Privacy Sales Education Compliance 112

AIIM

FEBRUARY 12, 2020

In today's digital era of information technology, a company needs to consider several factors to decide how to manage their data and documents online. A large share of companies have now adopted cloud-based infrastructure, but many still rely on the tried-and-true legacy of on-premises document management software programs.

Cloud 146

Cloud Access Privacy Security 146

Collibra

JUNE 23, 2023

The ever-growing digitalization of our world has raised significant concerns about data privacy and security, particularly for agencies that manage and process sensitive and confidential information. Focus: Regulatory frameworks Within the United States there are a number of regulatory frameworks that address citizen privacy.

Privacy 107

Privacy Government Data Privacy Data breaches 107

Data Protection Report

FEBRUARY 16, 2023

1] While the BYOD approach may offer certain advantages, such as greater flexibility and cost savings, employers should be mindful of the cybersecurity and privacy risks when leaving employees to their own devices. In this article, we explore some of these risks along with best practices employers can implement to mitigate these concerns.

Privacy 124

Privacy Cybersecurity Risk Digital transformation 124

Data Matters

APRIL 1, 2022

President and European Commission President announced in a joint press statement on March 25th, 2022 that an agreement “in principle” has been reached on a new Trans-Atlantic Data Privacy Framework (Privacy Shield Agreement 2.0). Privacy Shield 1.0 for international transfers of personal data. The European Commission and U.S.

Privacy 97

Privacy Data Privacy Personal data Government 97

OpenText Information Management

FEBRUARY 21, 2020

Demands on legal services within the enterprise have never been greater, extending beyond litigation and regulatory compliance to privacy, data security, and risk and crisis management. At the same time, budgets are being squeezed and legal departments are being asked to do more with less.

Risk 87

Risk Compliance Privacy Security 87

Hunton Privacy

FEBRUARY 23, 2022

The Texas AG’s investigation focuses on TikTok’s alleged violations of children’s privacy and facilitation of human trafficking, along with other potential unlawful conduct. On February 18, 2022, the Texas Attorney General’s Office (the “Texas AG”) announced that it had issued two Civil Investigative Demands (“CIDs”) to TikTok Inc.

Privacy 102

Privacy IT 102

Security Affairs

MARCH 17, 2020

Security experts from vpnMentor have discovered two corporate finance companies that leak half a million legal and financial documents online. vpnMentor experts uncovered a database exposed online on Amazon Web Services (AWS) that is leaking a huge amount of sensitive legal and financial documents. ” concludes vpnMentor.

Financial Services 112

Financial Services Access Privacy Security 112

Hunton Privacy

JUNE 29, 2016

Privacy Shield documents following the latest negotiations between U.S. Certain aspects of the prior Privacy Shield framework were criticized by the Article 29 Working Party , the European Parliament and the European Data Protection Supervisor. On June 29, 2016, Politico reported that it has obtained updated EU-U.S.

Privacy 56

Privacy Personal data Government IT 56

Data Protection Report

NOVEMBER 28, 2023

To help provide some guidance, Norton Rose Fulbright Canada hosted its 2023 technology, privacy and cybersecurity virtual summit. Our leading lawyers were joined by prominent industry leaders to discuss and explore the latest developments, challenges and opportunities in the technology, privacy, and cybersecurity landscape.

Cybersecurity 136

Cybersecurity Risk Artificial Intelligence Privacy 136

Schneier on Security

JULY 11, 2023

The Washington Post has an article about popular printing services, and whether or not they read your documents and mine the data when you use them for printing: Ideally, printing services should avoid storing the content of your files, or at least delete daily.

Privacy 55

Privacy Mining Libraries Communications 55

Hunton Privacy

JULY 12, 2023

On June 22, 2023, the Oregon House of Representatives passed the Oregon Consumer Privacy Act ( S.B. If signed, the OCPA would make Oregon the 12th state to have enacted comprehensive privacy legislation. 602, which makes the OCPA more proscriptive than other comprehensive state privacy laws.

Privacy 52

Privacy Personal data Insurance Sales 52

Data Protection Report

FEBRUARY 23, 2023

In this post, we will describe some of the risks introduced by personal information collection, and some of the legal obligations of vehicle manufacturers in protecting their customers’ privacy. Bill C-27 is expected to reform Canadian privacy law, replacing part of PIPEDA with the Consumer Privacy Protection Act (CPPA).

Privacy 85

Privacy Manufacturing Artificial Intelligence Data collection 85

Hunton Privacy

JUNE 22, 2022

Bill C-27 would modernize Canada’s approach to private sector data protection and introduce new rules related to artificial intelligence (“AI”).

Artificial Intelligence 105

Artificial Intelligence Privacy GDPR Information Security 105

Data Matters

OCTOBER 21, 2022

The AI Bill of Rights is a set of five principles : (1) Safe and Effective Systems, (2) Algorithmic Discrimination Protections, (3) Data Privacy, (4) Notice and Explanation, and (5) Human Alternatives, Consideration and Fallback. Data privacy is at the center of the framework.

Privacy 88

Privacy Data Privacy Education Government 88

Data Protection Report

JANUARY 25, 2022

Just as with social media platforms, privacy issues will be at the forefront of the metaverse as it develops and begins to gain widespread traction by users. In an earlier article, the privacy issues surrounding the metaverse were discussed from a European standpoint. As the Metaverse Expands, So Will Privacy Laws.

Privacy 113

Privacy Artificial Intelligence Personal data Data collection 113

Hunton Privacy

SEPTEMBER 25, 2023

Under the settlement, Google must: Pay $93 million in penalties; Provide additional notifications to users regarding settings to manage their location information; Provide users with detailed disclosures about the location information that Google collects, how it is used, and ways users can manage the information through a “Location Technologies” webpage; (..)

Privacy 74

Privacy Marketing IT Personal data 74

Hunton Privacy

APRIL 18, 2023

state to enact comprehensive privacy legislation. SB 5 now will head to Governor Eric Holcomb for a final signature, where he will have seven days upon transmission to sign SB 5 into law or veto it. This could make Indiana the seventh U.S.

Privacy 132

Privacy Personal data Sales Insurance 132