Schneier on Security

DECEMBER 19, 2023

There’s a rumor flying around the Internet that OpenAI is training foundation models on your Dropbox documents. Dropbox isn’t sharing all of your documents with OpenAI. Companies lying about what they do with your privacy is a very serious allegation. Privacy is important, and very easily misunderstood.

Privacy 105

Privacy GDPR Risk Government 105

IBM Big Data Hub

APRIL 24, 2024

These are just some examples of how organizations support data privacy , the principle that people should have control of their personal data, including who can see it, who can collect it, and how it can be used. One cannot overstate the importance of data privacy for businesses today.

Data Privacy 81

Data Privacy Privacy GDPR Personal data 81

Schneier on Security

SEPTEMBER 21, 2023

Jake Appelbaum’s PhD thesis contains several new revelations from the classified NSA documents provided to journalists by Edward Snowden. At this point, those documents are more historical than anything else. I recently published an essay about my experiences ten years ago. Nothing major, but a few more tidbits.

Archiving 107

Archiving IT Paper Privacy 107

Hunton Privacy

NOVEMBER 15, 2023

The Australian legislature increased maximum penalties for ‘serious’ contraventions of the Privacy Act with effect from December 2022 to at least A$50 million. The Publicly Available Facts Australian Clinical Labs Limited is listed on the Australian Securities Exchange and operates one of the largest pathology businesses in Australia.

Data breaches 128

Data breaches Privacy Risk Information Security 128

Krebs on Security

AUGUST 5, 2022

The lawsuit, filed July 28, 2022 in California Central District Court, argues that Experian’s documented practice of allowing the re-registration of existing Experian accounts without first verifying that the existing account holder authorized the changes violates the Fair Credit Reporting Act.

Security 286

Security Computer and Electronics Passwords Privacy 286

Security Affairs

APRIL 22, 2021

The importance of carrying out a careful risk and impact assessment in order to safeguard the security of the information and the data privacy. Therefore, it’s essential to carry out a careful risk and impact assessment in order to safeguard the security of the information and the data privacy.

Privacy 105

Privacy Security Data Privacy Risk 105

Hunton Privacy

OCTOBER 27, 2023

On October 17, 2023, the Office of the Privacy Commissioner of Canada (“OPC”) announced the release of two companion documents that provide further guidance on protecting the privacy of young people.

Privacy 72

Privacy Access IT Information Security 72

Hunton Privacy

JULY 8, 2022

Department of Health and Human Services (“HHS”) issued two guidance documents to “help protect patients seeking reproductive health care, as well as their providers” following the Supreme Court’s decision in Dobbs vs. Jackson Women’s Health Organization. On June 29, 2022, the U.S.

Privacy 107

Privacy Communications Encryption Security 107

The Last Watchdog

MAY 19, 2022

Chances are strong that your corporate website uses a CMS, and perhaps you have a separate CMS for documents and other files shared by your employees, partners, and suppliers. Security is essential for a CMS. What about public information? Best security practices. What can you do about it?

CMS 262

CMS Security Encryption Data breaches 262

Security Affairs

NOVEMBER 23, 2020

Computer security and data privacy are often poorly considered issues, experts urge more awareness of cyber threats. While the 27035 standard covers system and network security incidents, it can also apply to incidents involving other forms of information such as documents, intellectual property, personal and business information.

Data Privacy 108

Data Privacy Privacy Security Security awareness 108

Data Protection Report

OCTOBER 24, 2022

Privacy and cybersecurity practices of target companies are being increasingly scrutinized throughout the due diligence process in M&A transactions. Sellers can expect buyers to seek to allocate this risk within the representations and warranties and related indemnification obligations in their deal documentation.

Privacy 123

Privacy Cybersecurity Compliance Risk 123

IT Governance

NOVEMBER 6, 2023

According to the security company Resecurity , which discovered the listing, the data included victims’ name, age, gender, address, passport number and Aadhaar number (a 12-digit government identification number). It secured its systems, notified law enforcement and began investigating the incident. Boeing is “assessing the claim”.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Krebs on Security

JANUARY 9, 2023

Identity thieves have been exploiting a glaring security weakness in the website of Experian , one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report successfully answer several multiple choice questions about their financial history. ” Sen.

Security 335

Security Authentication Mining Cybersecurity 335

Schneier on Security

OCTOBER 26, 2023

Interesting article about the Snowden documents, including comments from former Guardian editor Ewen MacAskill MacAskill, who shared the Pulitzer Prize for Public Service with Glenn Greenwald and Laura Poitras for their journalistic work on the Snowden files, retired from The Guardian in 2018.

Archiving 104

Archiving Government Marketing Access 104

IT Governance

DECEMBER 11, 2023

Researchers from the German cyber security company Aplite discovered 3,806 servers from 111 countries accessible on the Internet. BianLian claims to have exfiltrated 5 TB of data, comprising millions of sensitive documents. In his keynote address, he said: “Privacy and AI go hand in hand – there is no either/or here.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

Schneier on Security

APRIL 3, 2020

Over that same period, the company has been exposed for having both lousy privacy and lousy security. My goal here is to summarize all of the problems and talk about solutions and workarounds. Privacy first: Zoom spies on its users for personal profit. This isn't the first time Zoom was sloppy with security.

Privacy 145

Privacy Security Encryption Personal data 145

The Last Watchdog

NOVEMBER 27, 2022

That often involves complex forms that demand applicants gather documentation and require case workers to spend weeks verifying data. Self-sovereign identity ( SSI ) leverages distributed ledgers to verify identity and PII – quickly, conveniently, and securely. The process is slow, costly, and frustrating. It’s also ripe for fraud.

Government 211

Government Blockchain Access Insurance 211

eSecurity Planet

APRIL 9, 2024

SaaS security checklists are frameworks for protecting data and applications in cloud-based environments. They serve as benchmarks for upholding strong security requirements, evaluating existing tools, and assessing potential solutions. We’ve designed a customizable template to help you develop your own SaaS security checklist.

Security 105

Security Compliance Cybersecurity Communications 105

Data Protection Report

FEBRUARY 16, 2023

Last year, about two-thirds of Canadian private sector employers had at least one employee using personal devices for business-related activities. [1] If a BYOD model is in place, employers should set out clear guidance and enforce appropriate security-related requirements to address these risks.

Privacy 126

Privacy Cybersecurity Risk Digital transformation 126

DLA Piper Privacy Matters

SEPTEMBER 20, 2022

When an individual provides a genetic sample, whether as part of a medical treatment, a clinical trial or in connection with ancestry research, what regimes are in place to protect his or her privacy? When does the privacy regime apply in Australia? The key requirement is that the genetic information must be about an individual.

Privacy 98

Privacy GDPR Personal data Risk 98

AIIM

FEBRUARY 12, 2020

In today's digital era of information technology, a company needs to consider several factors to decide how to manage their data and documents online. A large share of companies have now adopted cloud-based infrastructure, but many still rely on the tried-and-true legacy of on-premises document management software programs.

Cloud 147

Cloud Access Privacy Security 147

The Last Watchdog

MARCH 8, 2021

Like a couple of WWE arch rivals, Apple’s Tim Cook and Facebook’s Mark Zuckerberg have squared off against each other in a donnybrook over consumer privacy. Cook initially body slammed Zuckerberg — when Apple issued new privacy policies aimed at giving U.S. Related: Raising kids who care about their privacy.

Privacy 196

Privacy Personal data Manufacturing Data Privacy 196

Data Matters

SEPTEMBER 28, 2021

This summer, the Federal Trade Commission (“FTC”) hosted its sixth annual PrivacyCon , an event focused on the latest research and trends related to consumer privacy and data security. Privacy – Considerations and Understanding. Algorithms. AI and algorithms received substantial attention at PrivacyCon 2021.

Privacy 88

Privacy Security IoT Data breaches 88

Security Affairs

FEBRUARY 8, 2024

26 key cyber security stats for 2024 that every user should know, from rising cyber crime rates to the impact of AI technolog y. million unfilled cyber security jobs, showing a big need for skilled professionals. Market Growth: AI cyber security technology is projected to grow by 23.6% The US topped the list at $5.09

Security 118

Security Phishing IoT Ransomware 118

Schneier on Security

OCTOBER 13, 2020

One of the things we learned from the Snowden documents is that the NSA conducts “about” searches. An about search would something like “show me anyone that has used this particular name in a communications,” or “show me anyone who was at this particular location within this time frame.”

Privacy 137

Privacy Communications Information Security IT 137

DLA Piper Privacy Matters

NOVEMBER 3, 2022

Anyone with a passing interest in Australian privacy laws will no doubt have heard about the Optus data breach. The incident, which was made public in late September 2022, is thought to have affected around 9 million individuals (almost 40% of the Australian population), with identity documents relating to approximately 2.22

Privacy 97

Privacy Data breaches Insurance Government 97

eSecurity Planet

MAY 24, 2024

Cloud security fundamentals are the core requirements that ensure data protection, regulatory compliance, and access management in a cloud environment. Understanding cloud security challenges and knowing the cloud security tools available in the market significantly contribute to enhanced cloud security.

Cloud 117

Cloud Security Compliance Encryption 117

Data Matters

APRIL 1, 2022

President and European Commission President announced in a joint press statement on March 25th, 2022 that an agreement “in principle” has been reached on a new Trans-Atlantic Data Privacy Framework (Privacy Shield Agreement 2.0). Privacy Shield 1.0 for international transfers of personal data. Government; and. On the U.S.

Privacy 97

Privacy Data Privacy Personal data Government 97

Collibra

JUNE 23, 2023

The ever-growing digitalization of our world has raised significant concerns about data privacy and security, particularly for agencies that manage and process sensitive and confidential information. Focus: Regulatory frameworks Within the United States there are a number of regulatory frameworks that address citizen privacy.

Privacy 84

Privacy Government Data Privacy Data breaches 84

Schneier on Security

JULY 11, 2023

The Washington Post has an article about popular printing services, and whether or not they read your documents and mine the data when you use them for printing: Ideally, printing services should avoid storing the content of your files, or at least delete daily. Some services, like the New York Public Library and PrintWithMe, do both.

Privacy 57

Privacy Mining Libraries Communications 57

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Cross-Border Data Privacy and Security Concerns in the Dawn of Quantum Computing. Traditionally, privacy has taken the form of a policy document created, housed, and referenced by the offices of general counsel and compliance at most organizations. Data privacy is not a check-the-box compliance or security item.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

Krebs on Security

MARCH 20, 2024

Gaskell has been quoted in multiple “articles” about random subjects, such as this article at HRDailyAdvisor about the pros and cons of joining a company-led fantasy football team. ” Imagine that: Two different people-search companies mentioned in the same story about fantasy football. What are the odds?

Marketing 264

Marketing Cloud Privacy Data Privacy 264

Data Matters

AUGUST 25, 2022

On Thursday, August 11, the Federal Trade Commission (“FTC”) announced that it is exploring rules to crack down on harmful commercial surveillance and lax data security practices. This change opened the ability for the FTC to expand its oversight of privacy and cybersecurity issues.

Privacy 120

Privacy Cybersecurity Data Privacy Data collection 120

Krebs on Security

JANUARY 7, 2021

The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. ” The AO declined to comment on specific questions about their breach disclosure. .

Computer and Electronics 363

Computer and Electronics Access Communications Paper 363

Data Matters

SEPTEMBER 29, 2021

With the proliferation of social media platforms and other new technologies has come a renewed legal focus on privacy. But what about other contexts? Could a party, for instance, decline to produce, review, or even collect certain types of data due to privacy concerns? In this essay, Robert D.

Privacy 97

Privacy e-Discovery Computer and Electronics e-Delivery 97

The Last Watchdog

DECEMBER 27, 2023

Russia’s asymmetrical cyber-attacks have been a well-documented, rising global concern for most of the 2000s. Regulators are responding by implementing stricter data privacy and supply chain security standards. The wider context is all too easy to overlook. This means company leaders must do their due diligence.

Cybersecurity 312

Cybersecurity Military Government Data Privacy 312

Krebs on Security

MARCH 16, 2021

SMS text messages were already the weakest link securing just about anything online, mainly because there are tens of thousands of employees at mobile stores who can be tricked or bribed into swapping control over a mobile phone number to someone else. Since that time, no carrier has been able to replicate it. ” WHAT CAN YOU DO?

Security 361

Security Authentication Passwords Communications 361