Data Matters

MARCH 4, 2021

For over two and a half years, California has enjoyed the spotlight of having the most comprehensive data privacy law in the United States. The VCDPA, which will not enter into effect until January 1, 2023, borrows heavily from the California Consumer Privacy Act (CCPA) and the European Union (EU) General Data Protection Regulation (GDPR).

Personal data 74

Personal data GDPR Sales Privacy 74

Data Matters

APRIL 5, 2018

On 28 February 2018, the Belgian Commission for the Protection of Privacy (the “Privacy Commission”) published a recommendation setting out its approach to Data Protection Impact Assessments (“DPIAs”), and in doing so published a “White List” and a “Black List” of processing operations, pursuant to the General Data Protection Regulation (“GDPR”).

GDPR 92

GDPR Privacy Personal data Education 92

Data Matters

JULY 28, 2021

Congress continuing to stymie federal omnibus privacy legislation, states have decidedly taken up the call. Jared Polis signed into law Senate Bill 21-190, the Colorado Privacy Act (CPA). Most recently, on July 8, 2021, Colorado Gov. After signing the CPA into law, Gov. ” Additionally, Gov. ” Additionally, Gov. Despite Gov.

Privacy 88

Privacy Sales Personal data Compliance 88

Hunton Privacy

OCTOBER 14, 2021

During the week of October 4, 2021, California Governor Gavin Newsom signed into law bills amending the California Privacy Rights Act of 2020 (“CPRA”), California’s data breach notification law and California’s data security law. The bill also makes a number of non-substantive changes to the California Consumer Privacy Act (“CCPA”)/CPRA.

Privacy 98

Privacy Insurance Security Data breaches 98

IT Governance

DECEMBER 19, 2023

We’re also introducing two new categories this week: ‘AI’ and ‘Key dates’. At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Source (New) Finance USA Yes 1.1 TB Greenbox Loans, Inc. Source (New) Construction USA Yes 50.93 Wolasky P.A.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

OCTOBER 21, 2021

The need for experienced and qualified cyber security professionals is a highlight of Cybersecurity Career Awareness Week , led by NICE (National Initiative for Cybersecurity Education). Information security is a broader category that protects all information assets, whether in hard copy or digital form.

Security 111

Security Information Security GDPR Data Privacy 111

IT Governance

NOVEMBER 17, 2020

Under the GDPR (General Data Protection Regulation) , all personal data breaches must be recorded by the organisation and there should be a clear and defined process for doing so. Sensitive personal data is a specific set of “special categories” that must be treated with extra security. How to avoid data breaches.

Personal data 105

Personal data Data breaches Data collection GDPR 105

Data Protection Report

MARCH 7, 2024

Approximately at the same time as the Executive Order that we described in Part 1 was issued, the Attorney General (AG) unofficially released 90 pages of Advanced Notice of Proposed Rulemaking (ANPRM), which will become official once published in the Federal Register. What is included in the special category of “government related data”?

Access 59

Access Military Compliance Personal data 59

DLA Piper Privacy Matters

NOVEMBER 29, 2021

Among the organizations that have designated a DPO, the most represented sectors are, unsurprisingly, the public administration, education and health sectors. While the DPO is not responsible for maintaining the record of processing activities, in practice, such maintenance is generally part of his or her effective missions.

GDPR 116

GDPR Compliance Personal data Communications 116

KnowBe4

SEPTEMBER 10, 2019

Sorting out the two biggest privacy regulations to hit privacy professionals in decades. The California Consumer Privacy Act (CCPA) was introduced just a month after the European Union instituted the General Data Protection Regulation (GDPR), earning the CCPA the nickname of “California’s GDPR.”.

GDPR 72

GDPR Privacy Personal data Passwords 72

IT Governance

AUGUST 21, 2019

The GDPR (General Data Protection Regulation) hasn’t exactly crept up unnoticed over the past year or so, but it’s still caught many organisations by surprise. You’re probably meeting some of the Regulation’s requirements already, albeit in an unfocused way, so the scale of the task won’t be quite as big as you might have feared.

GDPR 86

GDPR Compliance Personal data Access 86

eSecurity Planet

APRIL 26, 2024

Next-generation firewalls (NGFWs): Improve the general security of a firewall with advanced packet analysis capabilities to block malware and known-malicious sites. Internet of Things (IoT) security: Encompasses a variety of tools and techniques to secure IoT, operations technology (OT), and other similar categories of endpoints.

Security 117

Security Cloud Cybersecurity Risk 117

HL Chronicle of Data Protection

SEPTEMBER 5, 2019

The Federal Trade Commission (“FTC”) is requesting public comments on the Children’s Online Privacy Protection Rule (“COPPA Rule”). Are there additional categories of information that should be expressly included in the definition of “Personal information,” such as genetic data, fingerprints, retinal patterns, or other biometric data?

Education 40

Education Privacy IT 40

eSecurity Planet

DECEMBER 18, 2023

Users must evaluate the overall security posture of the SaaS provider, focusing on data privacy and compliance. Data Privacy Users have direct control over data privacy measures, including access controls and encryption. Failure to meet these criteria may result in legal penalties, fines, and reputational harm.

Security 111

Security Cloud Encryption Compliance 111

eSecurity Planet

SEPTEMBER 23, 2022

Also read: Security Compliance & Data Privacy Regulations. Therefore, we should examine each category and consider what the rules fundamentally request. Once the documentation is in place, IT security managers need to test the controls to verify that they meet the standards and that the controls truly mitigate the risk.

Cybersecurity 130

Cybersecurity Compliance Risk Communications 130

eDiscovery Daily

NOVEMBER 26, 2017

While we were preparing to eat turkey and stuff ourselves with various goodies last week, the Cloud Security Alliance (CSA) provided an important guideline for compliance with the European Union General Data Protection Regulation (GDPR).

Cloud 40

Cloud GDPR Personal data Compliance 40

eSecurity Planet

MAY 24, 2024

10 Fundamentals of Cloud Security 5 Common Cloud Security Challenges 5 Common Cloud Security Solutions Bottom Line: Develop a Strong Cloud Security Fundamental Strategy ICP Plugin - body top3 - Category: Country: US --> How Secure Is the Cloud? Ensure that security measures stay effective and compliant. You can unsubscribe at any time.

Cloud 117

Cloud Security Compliance Encryption 117

IT Governance

AUGUST 2, 2019

If you think that charities might be shown lenience under the GDPR (General Data Protection Regulation) , you’re wrong. The Regulation treats charities in much the same way as any organisation, because although they’re not using personal data to make a profit, they still run the risk of data breaches and privacy violations.

GDPR 56

GDPR Compliance Personal data Risk 56

IT Governance

MARCH 28, 2018

Whatever the size and setting of your school, the General Data Protection Regulation (GDPR) places high expectations on protecting the personal data of your data subjects, especially children. Sensitive personal data is a specific set of “special categories” that must be treated with extra security, such as genetic and biometric data.

GDPR 68

GDPR Personal data Compliance Data breaches 68

eDiscovery Daily

OCTOBER 20, 2019

Here are some of the eDiscovery-related sessions for today: 11:00 AM – 12:00 PM: The Business of Law 2020: The FTI-Relativity General Counsel Survey. Speakers Include: David Horrigan – Discovery Counsel and Legal Education Director, Relativity; Sophie Ross – Global Chief Executive Officer, FTI; Jessica Nolan – Sr.

e-Discovery 40

e-Discovery Data Privacy Education Privacy 40

ForAllSecure

SEPTEMBER 10, 2021

PPP wanted to give their past high school selves the infosec education they didn’t have. It seems that preparing for, or even playing a game of capture the flag, might be a great way to expose any educational gaps, if not generally improve and deepen the security skills, you might already possess. So what is CyLab.

Education 52

Education Cybersecurity IT Marketing 52

Hunton Privacy

JULY 11, 2017

On July 10, 2017, the Cyberspace Administration of China published a new draft of its Regulations on Protecting the Security of Key Information Infrastructure (the “Draft Regulations”), and invited comment from the general public.

Energy and Utilities 45

Energy and Utilities Security Cybersecurity Manufacturing 45

IBM Big Data Hub

FEBRUARY 9, 2024

. “There are cameras that are on 24/7 and they’re capturing what happens just as it happens without any filtering, without any intentionality,” says Peter Norvig, Distinguished Education Fellow at the Stanford Institute for Human-Centered Artificial Intelligence (HAI).

Artificial Intelligence 97

Artificial Intelligence Cloud Risk Access 97

eDiscovery Daily

JANUARY 8, 2020

Today, let’s take a look back at cases related to disputes regarding proportionality vs. relevancy vs. privacy. PROPORTIONALITY vs. RELEVANCY vs. PRIVACY. We grouped those cases into common subject themes and will review them over the next few posts. Perhaps you missed some of these? Now is your chance to catch up!

e-Discovery 45

e-Discovery Privacy Computer and Electronics Insurance 45

Data Protector

OCTOBER 11, 2017

In our manifesto at the general election we committed to provide people with the ability to require major social media platforms to delete information held about them, especially when that information related to their childhood. Data is not just a resource for better marketing, better service and delivery.

GDPR 120

GDPR Personal data Government IT 120