Remove category
Remove Encryption Remove Financial Services Remove Information Security Remove Insurance Remove Training
article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

Relatedly, PIPL outlines some categories of sensitive information that do not receive additional protection under GDPR. Also, health and financial data, among other categories of more sensitive data, is often treated as a more protected category of data under general data-privacy laws – subject to stricter protection requirements.

article thumbnail

China’s PIPL has finally arrived, and brings helpful clarification (rather than substantial change) to China’s data privacy framework

DLA Piper Privacy Matters

Government Access to/Disclosure of Personal Information Data controllers must not provide personal information stored within China to overseas legal or enforcement authorities unless approval is obtained from a China authority. This appears to align with the new tiered data classification obligations under the Data Security Law.

article thumbnail

An Approach to Cybersecurity Risk Oversight for Corporate Directors

Data Matters

Information security is not yet a science; outside of the handful of issues falling under the field of cryptography, there is no formalized system of classification. Encrypting critical data assets. The most prepared cybersecurity programs of today will not attempt to implement a static, “out-of-the-box” solution to cyber risk.