Data Matters

SEPTEMBER 20, 2021

The National Association of Insurance Commissioners (NAIC) held its Summer 2021 National Meeting (Summer Meeting) August 14-17, 2021. The changes are effective December 31, 2021. Valuation of Securities (E) Task Force Adopts an Amendment to the Purposes and Procedures Manual to Add Instructions for Review of Funds.

Insurance 88

Insurance e-Delivery Paper Sales 88

IT Governance

OCTOBER 31, 2023

Publicly disclosed data breaches and cyber attacks France says Russian state hackers breached numerous critical networks Date of breach: From second half of 2021 (reported 26 October 2023). Thousands of drivers have sensitive data exposed to hackers in major IT breach Date of breach: Unclear, but breached documents date back to 2017.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

KnowBe4

MARCH 14, 2023

CyberheistNews Vol 13 #11 | March 14th, 2023 [Heads Up] Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears Robert Lemos at DARKReading just reported on a worrying trend. In a recent report, data security service Cyberhaven detected and blocked requests to input data into ChatGPT from 4.2%

Phishing 87

Phishing Security Artificial Intelligence Security awareness 87

IT Governance

JULY 1, 2021

We found a comparatively low 9,780,931 breached records from publicly disclosed security incidents in June 2021. June’s figures bring the annual running total of security incidents to 729 and the total number of breached records to 3,947,030,094.

Data breaches 130

Data breaches Ransomware Computer and Electronics Retail 130

Security Affairs

AUGUST 11, 2021

ransomware operators, the group announced the hack on its leak site, “These people are beyond privacy and security. — Cyble (@AuCyble) August 11, 2021. The leak site shows a folder named W1 that contains a collection of PDF documents allegedly stolen from the company. Pierluigi Paganini.

Ransomware 140

Ransomware Privacy Security IT 140

Privacy and Cybersecurity Law

FEBRUARY 19, 2021

On January 28, 2021, due to the Data Privacy Day, the Brazilian National Data Protection Authority (“ANPD”), through Ordinance No. Although Ordinance No. Although Ordinance No. Although Ordinance No. Although Ordinance No. Although Ordinance No.

Personal data 52

Personal data Data Privacy Privacy Risk 52

IT Governance

JUNE 1, 2021

If you find yourself facing a cyber security disaster, IT Governance is here to help. Edinburgh mental health clinic in probe after client information accessed in scam (unknown) Iranian Hackers Hit H&M Israel (unknown) South Africa’s VirginActive goes offline after cyber attack (unknown) B.C. Spargo & Associates Inc.

Data breaches 124

Data breaches Ransomware Insurance Energy and Utilities 124

Krebs on Security

APRIL 27, 2022

When KrebsOnSecurity recently explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media firms and technology providers, many security experts called it a fundamentally unfixable problem. A sample Kodex dashboard. Image: Kodex.us.

Government 192

Government Compliance Passwords IT 192

DLA Piper Privacy Matters

MAY 18, 2021

On 22 April 2021, the Belgian Constitutional Court annulled the Act of 29 May 2016 on the collection and storage of data in the electronic communications sector (the Data Retention Act). Authors : Heidi Waem and Gert-Jan Fraeyman.

Communications 119

Communications Privacy Personal data Security 119

Thales Cloud Protection & Licensing

NOVEMBER 30, 2021

Tue, 11/30/2021 - 06:01. During the Thales Trusted Access Summit 2021, I discussed how advances in identity proofing such as biometrics and smartphone technologies are enabling organizations to deliver KYC effectively by offering a quick, frictionless, and secure identity proofing environment. Setting the scene.

Authentication 71

Authentication Privacy Compliance Retail 71

eSecurity Planet

SEPTEMBER 8, 2023

Application programming interface (API) security is a combination of tools and best practices to secure the all-important connections between applications. API security protects data and back-end systems while preserving fluid communication between software components through strict protocols and access controls.

Security 107

Security Authentication Access Encryption 107

Krebs on Security

APRIL 3, 2023

. “ The Private Office of John Bernard ” let it be known to investment brokers that he had tens of millions of dollars to invest in tech startups, and he attracted a stream of new victims by offering extraordinarily generous finder’s fees to brokers who helped him secure new clients. Official incorporation documents from the U.K.’s

Communications 221

Communications Marketing Security Insurance 221

Data Protection Report

FEBRUARY 6, 2024

The Commission recently made a partial adequacy decision for transfers to the US under the EU-US Data Privacy Framework ( DPF ), meaning that a TIA is not required for transfers to recipients who have self-certified under the DPF. 12] The guidance does not suggest that expectations would differ for processors not subject to the GDPR.

GDPR 75

GDPR Personal data Compliance IT 75

Data Protection Report

AUGUST 16, 2022

On July 27, 2022, the Office of the Information and Privacy Commissioner of Alberta ( OIPC ) released its 2022 PIPA Breach Report. [1] 2020-2021 reporting period. Failure to Secure. 1] The report analyzes the nearly 2,000 breach reports [2] received by the OIPC during. . By the Numbers [5]. . 2010-2011 reporting period.

Privacy 105

Privacy Risk Cybersecurity Phishing 105

Hunton Privacy

NOVEMBER 9, 2021

On November 8, 2021, law enforcement agencies in both the United States and European Union announced that a series of actions, including a number of arrests, were taken against the Russia-linked ransomware group, “REvil.” JBS paid an $11 million ransom while Kaseya said it declined to pay the hackers. businesses. France and Germany.

Ransomware 102

Ransomware IT Cybersecurity Information Security 102

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. This resolution highlights the SEC’s continued focus on cybersecurity.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

eSecurity Planet

APRIL 26, 2022

Luckily for cybersecurity startups, there’s no shortage of interest in tomorrow’s next big security vendors. billion in 2021, and growing concerns over data security , software supply chains , and ransomware suggest the market will remain strong through economic ups and downs. How Do VC Firms Work? a16z Investments.

Cybersecurity 126

Cybersecurity Cloud Marketing Security 126

Data Matters

AUGUST 17, 2021

On August 11, 2021, the Federal Financial Institutions Examination Council (FFIEC)1 issued guidance establishing risk management principles and practices to support the authentication of users accessing a financial institution’s information systems and customers accessing a financial institution’s digital banking services (the Guidance).

Authentication 88

Authentication Access Risk Financial Services 88

DLA Piper Privacy Matters

AUGUST 12, 2021

On 11 August 2021, the Information Commissioner’s Office ( ICO ) launched a public consultation on its draft international data transfer agreement ( IDTA ) and guidance on data transfers. As with the EC SCCs, the IDTA consolidates the full range of SCCs that may be required into one document (i.e. controller/processor etc.);

IT 98

IT GDPR Risk Personal data 98

Thales Cloud Protection & Licensing

NOVEMBER 17, 2021

Thu, 11/18/2021 - 06:28. The Department of Homeland Security (DHS), in partnership with the National Institute of Standards and Technology (NIST), has released a roadmap to help organizations protect their data and systems and to reduce risks related to the advancement of quantum computing technology. The quantum leap.

Encryption 87

Encryption Risk Communications Data breaches 87

DLA Piper Privacy Matters

JUNE 23, 2021

On 21 June 2021, the European Data Protection Board (“ EDPB ”) published the final Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data (“ Recommendations ”). This appears to rule out transfers to some countries, for example, the U.S.,

GDPR 99

GDPR Personal data Compliance Risk 99

Data Matters

APRIL 6, 2022

Securities and Exchange Commission (SEC) Division of Enforcement (EXAMS or Division) issued its annual examination priorities. Fiscal Year 2021 Highlights. In FY 2021, the Division completed 3,040 examinations, which represent a 3% increase from the prior year, and is on par with prepandemic fiscal year 2019.

Retail 88

Retail Compliance Sales Risk 88

Data Matters

APRIL 10, 2020

While the world seems to have ground to a halt in so many ways, time still marches on, and along with it, the California Consumer Privacy Act (“CCPA”) enforcement date (July 1, 2020) inches ever closer. Restoration of privacy policy disclosures (§ 999.308). Guidance on user-enabled global privacy controls (§ 999.315).

Privacy 68

Privacy Sales Insurance Compliance 68

ARMA International

SEPTEMBER 27, 2021

This part also discusses managing CS risks such as ransomware, privacy, change management, and user adoption. Commissioned by organizers to predict worst-case scenarios for the Munich games, [Georg] Sieber came up with a range of possibilities, from explosions to plane crashes, for which security teams should be prepared. Introduction.

Digital transformation 54

Digital transformation Risk IT Computer and Electronics 54

Data Matters

DECEMBER 28, 2020

In November 2019, the IAIS agreed to a definition and approach for this assessment, and in November 2020, the IAIS released a draft document setting out the overarching principles and concepts for the assessment of whether the AM provides comparable outcomes to the ICS. 43R —Loan-Backed and Structured Securities. Revisions to SSAP No.

Insurance 68

Insurance Paper Risk Analytics 68

DLA Piper Privacy Matters

MARCH 4, 2021

Security vulnerabilities including hacking, unauthorised access, malware, phishing and ransomware attacks totalled 462 breach notifications. The DPC recommends that organisations: undertake periodic reviews of their IT security measures; implement a comprehensive training plan for employees; and. DPC Strategy for 2021.

GDPR 105

GDPR Compliance Data breaches Marketing 105

Data Protection Report

JUNE 7, 2021

Privacy professionals have been waiting for the New SCCs for several years and have been particularly interested to know if the New SCCs will help address the complex requirements of the Schrems II case. The documentation published comprises both an Implementing Decision and an Annex setting out the New SCCs themselves.

Personal data 119

Personal data GDPR Data breaches Access 119

Data Matters

DECEMBER 24, 2020

Affected institutions will have very limited time to assess and comment on the NPR, as the comment period closes on January 4, 2021, notwithstanding two intervening federal holidays. Financial institutions would be required to document their method for determining the prevailing exchange rate.” 11 Proposed 31 C.F.R.

Marketing 68

Marketing Risk Blockchain Privacy 68

Data Matters

SEPTEMBER 4, 2019

Securities and Exchange Commission on June 5, 2019, broker-dealers and associated persons are required to act in the best interest of a retail customer when recommending a securities transaction or investment strategy involving securities to a retail customer.

Insurance 68

Insurance Paper Risk Analytics 68

HL Chronicle of Data Protection

MAY 13, 2019

Of particular concern to state-level policymakers and enforcement authorities are business practices that in their view may contribute to security incidents. Major data breaches in recent years are spurring state legislators and regulators across the US into action. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? Welcome to the hacker by original podcast from for all secure, it's about challenging our expectations about the people who hack for a living.

IoT 52

IoT Communications Security IT 52

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? Welcome to the hacker by original podcast from for all secure, it's about challenging our expectations about the people who hack for a living.

IoT 52

IoT Communications Security IT 52

Data Matters

MAY 9, 2019

Advocates of blockchain note that it has the potential to improve the efficiency, security and trustworthiness of a wide variety of transactions. Securities and Exchange Commission’s expected adoption of “Regulation Best Interest” in September 2019. NAIC Continues to Evaluate the Exposed Revisions to SSAP No. 41R — Surplus Notes .

Insurance 68

Insurance Blockchain Big data Risk 68