IT Governance

AUGUST 2, 2019

If you think that charities might be shown lenience under the GDPR (General Data Protection Regulation) , you’re wrong. The breach was reported to the ICO (Information Commissioner’s Office), which oversees GDPR compliance in the UK, and Mermaids is now subject to disciplinary action. What are charities’ GDPR requirements?

GDPR 56

GDPR Compliance Personal data Risk 56

IT Governance

MAY 23, 2019

A year ago this week, the GDPR (General Data Protection Regulation) took effect, promising to revolutionise information security. In the first half of 2018, it was practically impossible to avoid news stories about the GDPR, the majority of which focused on the potential for hefty administrative fines for non-compliance.

GDPR 72

GDPR Data breaches Compliance Retail 72

Thales Cloud Protection & Licensing

JUNE 4, 2019

On May 25, the European Union celebrated the first anniversary of the enforcement of the General Data Protection Regulation (GDPR) , the most important change in data privacy regulations in the last decade, designed to restructure the way in which personal data is handled across every sector (public or private) and every industry.

GDPR 103

GDPR Data Privacy Compliance Privacy 103

The Last Watchdog

MAY 13, 2024

Enhanced threat blocking Quad9 is a free anycast DNS platform delivering robust security protections and privacy guarantees that comply with rigorous Swiss Data Protection and GDPR rules. About AI SPERA: AI SPERA launched its global cybersecurity service, Criminal IP, on April 17, 2023, following a successful year-long beta phase.

Phishing 130

Phishing Privacy Big data Cybersecurity 130

IT Governance

AUGUST 21, 2019

The GDPR (General Data Protection Regulation) hasn’t exactly crept up unnoticed over the past year or so, but it’s still caught many organisations by surprise. Meanwhile, although the specifics of Brexit are still unclear, one thing is certain: whatever happens, UK-based organisations will be subject to the GDPR’s requirements.

GDPR 86

GDPR Compliance Personal data Access 86

IT Governance

MARCH 28, 2019

At the recent ASCL (Association of School and College Leaders) conference , a guest said to us: “The GDPR ? How was it possible for someone to be so misguided about such a well-publicised regulation, the requirements of which have huge ramifications for the way organisations handle personal data? GDPR compliance in schools.

GDPR 92

GDPR Compliance Data breaches Personal data 92

IT Governance

NOVEMBER 9, 2018

In addition to data subjects’ rights to be informed, of access, to rectification, to erasure, to restrict processing, to data portability and to object, the EU’s GDPR (General Data Protection Regulation) sets out requirements relating to automated individual decision-making, including profiling. What is profiling under the GDPR?

GDPR 88

GDPR Personal data Financial Services Compliance 88

IT Governance

NOVEMBER 21, 2017

Staff awareness should be a major concern for organisations looking to comply with the EU General Data Protection Regulation (GDPR). However, our 2017 GDPR Report found that less than 10% of organisations have provided GDPR staff awareness training to all employees. Why implement a GDPR staff awareness training programme?

GDPR 63

GDPR Compliance Education Data breaches 63

KnowBe4

SEPTEMBER 10, 2019

The California Consumer Privacy Act (CCPA) was introduced just a month after the European Union instituted the General Data Protection Regulation (GDPR), earning the CCPA the nickname of “California’s GDPR.”. While the GDPR has been in effect since May of 2018, the CCPA is on track to become effective on January 1, 2020.

GDPR 72

GDPR Privacy Personal data Passwords 72

IT Governance

MAY 27, 2021

If they fail to adequately protect that information or violate data subject rights – which are protected by the likes of the GDPR (General Data Protection Regulation) – your organisation faces myriad problems. Staff awareness training for the GDPR does not mean simply briefing your employees about the Regulation. 3) Be thorough.

Security awareness 119

Security awareness IT Security GDPR 119

IT Governance

OCTOBER 29, 2018

When organisations look to initiate a GDPR compliance programme, the ‘people’ factor is often overlooked. Yet staff awareness and education are key components of any organisation’s GDPR compliance framework. . Staff awareness training for the GDPR does not mean simply briefing your employees about the Regulation.

GDPR 75

GDPR Compliance Security awareness Education 75

IT Governance

OCTOBER 29, 2018

When organisations look to initiate a GDPR compliance programme, the ‘people’ factor is often overlooked. Yet staff awareness and education are key components of any organisation’s GDPR compliance framework. . Staff awareness training for the GDPR does not mean simply briefing your employees about the Regulation.

GDPR 75

GDPR Compliance Security awareness Education 75

IT Governance

OCTOBER 30, 2018

Staff awareness training is a core component of GDPR compliance, yet many organisations haven’t implemented the necessary measures. That’s hardly a surprise, given how few resources organisations dedicate to educating their staff on how to handle sensitive information. Staff training under the GDPR.

GDPR 77

GDPR Government Data breaches Information Security 77

IT Governance

OCTOBER 30, 2018

Staff awareness training is a core component of GDPR compliance, yet many organisations haven’t implemented the necessary measures. That’s hardly a surprise, given how few resources organisations dedicate to educating their staff on how to handle sensitive information. Staff training under the GDPR.

GDPR 77

GDPR Government Data breaches Information Security 77

IT Governance

FEBRUARY 23, 2018

There is an alarming lack of awareness across all industries about the EU General Data Protection Regulation (GDPR) , according to a government survey. Almost two thirds (62%) of respondents hadn’t heard of the Regulation, and only about 10% had taken steps to meet its compliance requirements. Preparing for the GDPR.

GDPR 63

GDPR Compliance Insurance Personal data 63

The Last Watchdog

AUGUST 23, 2021

Here are five unique cybersecurity challenges you should know about. In that case, you must abide by the General Data Protection Regulation (GDPR), which imposes fines on some activities that are perfectly legal in the U.S. These obstacles can stand in the way of reaching out to workers about crucial security updates.

Communications 223

Communications Cybersecurity GDPR Risk 223

Data Matters

OCTOBER 21, 2021

Significantly, the UK’s proposed approach may diverge in some respects from the EU’s GDPR. Invest in education on AI for schools and businesses, most notably via AI skills “Bootcamps”. Ensuring AI benefits all sectors and regions ” – this pillar is about ensuring AI “diffuses” across the economy.

Artificial Intelligence 169

Artificial Intelligence Government Paper IT 169

IT Governance

JULY 25, 2018

One overlooked side-effect of the GDPR (General Data Protection Regulation) is the extent to which data privacy and information security have become widely discussed. For example, the below screenshot shows a friend asking me about a suspicious link. That link ended up sparking a discussion in my friend’s office about phishing.

GDPR 68

GDPR Phishing Security Data Privacy 68

IT Governance

MARCH 1, 2018

GDPR compliance should be a priority and high on every organisation’s agenda with only three months until the regulation comes into effect on 25 May 2018. Training – make sure those responsible for the project are trained on implementing the GDPR in the workplace.

GDPR 61

GDPR Compliance Privacy Data breaches 61

The Last Watchdog

MAY 28, 2024

The human factor Cybersecurity is not just about technology; it’s about people. These examples provide relatable scenarios that underscore the importance of investing in employee education. But it isn’t a question of ”if” an organization will be targeted, but “when.” million compared to those with lower levels.

Cybersecurity 113

Cybersecurity Security Data breaches Cloud 113

IT Governance

JUNE 15, 2018

Even though the EU General Data Protection Regulation (GDPR) is now in effect, many organisations are still working towards compliance. The GDPR gives individuals eight rights relating to their personal data. Failure to do so is a violation of the GDPR and could lead to disciplinary action. The right to erasure.

GDPR 64

GDPR Personal data Compliance Access 64

IT Governance

NOVEMBER 20, 2017

A recent report from CenturyLink has highlighted a lack of preparation among UK law firms for the upcoming EU General Data Protection (GDPR) compliance deadline. The report questioned more than 150 legal sector IT decision makers in the UK and discovered that only 25% believe they are currently compliant with the GDPR.

GDPR 68

GDPR Compliance Paper Data breaches 68

Information Governance Perspectives

MAY 8, 2020

Hunter, Dr. Tao Jin, Dr. Patricia Franks, Rae Lynn Haliday, Cheryl Pederson, and Wendy McLain on the topic of Meeting Evolving Business Needs – A Conversation Between RIM Educators and Thought Leaders. And I think the next panel will discuss that… But the one thing I want us ALL to think about today is this….

Education 52

Education Digital transformation Search queries Information governance 52

IT Governance

MAY 7, 2024

It emerged this week, according to the New York City Department of Education, that data from a further 381,000 students was also compromised in this incident. Data breached: 1,201,000 people’s data. Apparently, the data belongs to tens of thousands of Australians.

Data breaches 59

Data breaches Education Manufacturing Retail 59

eSecurity Planet

AUGUST 9, 2022

And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR, the EU’s flagship data privacy and “right to be forgotten” regulation, has made the stakes of a data breach higher than ever. GDPR-style data privacy laws came to the U.S.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

IT Governance

OCTOBER 7, 2019

HR plays a crucial role in an organisation’s GDPR (General Data Protection Regulation) compliance. The GDPR outlines six lawful bases that will be appropriate in different circumstances: Consent : the individual agrees to the data processing. Let’s take a look at five issues that HR must address when handling personal data.

GDPR 68

GDPR Personal data Compliance Communications 68

IT Governance

JULY 28, 2020

Blackbaud, which provides education administration, fundraising and financial management software, was infected with ransomware, giving cyber criminals access to a wealth of sensitive information. At least eight educational institutions in the US and Canada were also affected, as well as several charities on both sides of the Atlantic.

GDPR 124

GDPR Education Ransomware Data breaches 124

Data Matters

APRIL 5, 2018

On 28 February 2018, the Belgian Commission for the Protection of Privacy (the “Privacy Commission”) published a recommendation setting out its approach to Data Protection Impact Assessments (“DPIAs”), and in doing so published a “White List” and a “Black List” of processing operations, pursuant to the General Data Protection Regulation (“GDPR”).

GDPR 92

GDPR Privacy Personal data Education 92

eDiscovery Daily

JANUARY 22, 2019

As covered in Fortune ( France Fines Google $57 Million For GDPR Violations , written by Emily Price), France’s data protection regulator, the Commission nationale de l’informatique et des libertés (CNIL), has issued a €50 million fine (about $56.8 million ) fine to Google for failing to comply with GDPR. OK, guess again.

GDPR 69

GDPR Data Privacy Privacy Education 69

AIIM

APRIL 15, 2021

You can have some great, fantastic ideas about what you want to do with information, but you need to be able to educate everyone up and down the stack about what you are planning. Be explicit about the C-Suite support you need. In many organizations, the chaos problem isn’t simply about information volume and variety.

Education 234

Education Records Management GDPR Risk 234

IT Governance

FEBRUARY 6, 2024

Organisation(s) Sector Location Data breached? Source 1 ; source 2 (New) Professional services USA Yes 11,556 Poder Judicial de Santa Cruz Source (New) Legal Argentina Yes 8,732 J.D.

Data Privacy 88

Data Privacy Privacy Insurance Security 88

Thales Cloud Protection & Licensing

FEBRUARY 15, 2018

Have we become too used to and too apathetic about breaches? One such example is the recent disclosure that military personnel wearing Strava devices are revealing highly sensitive information about their locations and activities. People either do not hear about breaches anymore, or they tune them out.

IoT 89

IoT Encryption Military Insurance 89

The Last Watchdog

MARCH 21, 2022

It’s an irony often noted about wealth: The more money you have, the more you have to worry about money – managing it, protecting it, nurturing it for further growth. For businesses, the same is now true about information. Related: Using employees as human sensors. Data has become critical to your organization’s success.

Encryption 214

Encryption Cloud Privacy GDPR 214

Thales Cloud Protection & Licensing

SEPTEMBER 25, 2023

Here’s the thing about compliance, most people know that it’s necessary, but it can often be seen as an arduous blocker to doing fun things like cycling on your own - or growing a business in a fast-paced digital economy! A DPO’s duties are laid out in Article 39 of the GDPR. Data breaches, brand damage and financial reputation.

Compliance 78

Compliance GDPR Risk Education 78

eDiscovery Daily

JUNE 3, 2018

Now that Europe’s General Data Protection Regulation (GDPR) is in effect, all organizations out there have a good handle on all of their data, including which personally identifiable information (PII) they handle for European data subjects out there and clear policies for how they ensure protection of that PII. OK, maybe not.

GDPR 43

GDPR Data Privacy Privacy Big data 43

IT Governance

MAY 9, 2019

HMRC (HM Revenue and Customs) has been told to delete more than five million people’s voice records after it was discovered that the way the information was collected breached the GDPR (General Data Protection Regulation). The organisation changed the way it obtained consent in October 2018, which the ICO says now complies with the GDPR.

GDPR 53

GDPR Personal data Education Passwords 53

IT Governance

SEPTEMBER 24, 2020

Blackbaud, which provides education administration, fundraising and financial management support, was attacked earlier this year, with cyber criminals accessing victims’: Names; Dates of birth; Addresses; Phone numbers; Email addresses; Donation history; and Events that individuals attended. What about other universities?

Ransomware 111

Ransomware Data breaches Education GDPR 111