Collibra

JUNE 23, 2023

The ever-growing digitalization of our world has raised significant concerns about data privacy and security, particularly for agencies that manage and process sensitive and confidential information. Focus: Regulatory frameworks Within the United States there are a number of regulatory frameworks that address citizen privacy.

Privacy 87

Privacy Government Data Privacy Data breaches 87

Thales Cloud Protection & Licensing

APRIL 1, 2021

Protecting Sensitive Data with Luna Key Broker for Microsoft Double Key Encryption. Thales has integrated its Luna HSMs with DKE for Microsoft 365, which work together to enable organizations to protect their most sensitive data while maintaining full control of their encryption keys. Thu, 04/01/2021 - 14:04.

Encryption 79

Encryption Compliance Cloud GDPR 79

IT Governance

OCTOBER 24, 2023

Incident details: The company found that data on its network had been encrypted without its knowledge. American Family Insurance confirms cyberattack is behind IT outages Date of breach: 14 or 15 October 2023. Breached organisation: American Family Insurance, headquartered in Wisconsin, US. The attackers demanded $1.9

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Data Matters

JULY 30, 2018

In October 2017, the National Association of Insurance Commissioners (NAIC) adopted an Insurance Data Security Model Law. On May 3, 2018, South Carolina became the first state to enact this Model Law, in the form of the South Carolina Insurance Data Security Act (H.B. See CT Gen Stat § 38a-999b (2015) ; 23 NYCRR 500.

Insurance 60

Insurance Security Cybersecurity Data breaches 60

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No. sought coverage for expenses under its property insurance policy.

Insurance 70

Insurance Cybersecurity Risk Education 70

Hunton Privacy

JANUARY 2, 2019

New cybersecurity rules for insurance companies licensed in South Carolina are set to take effect in part on January 1, 2019. The new law is the first in the United States to be enacted based on the data security model law drafted by the National Association of Insurance Commissioners.

Insurance 77

Insurance Cybersecurity Data breaches Encryption 77

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. appeared first on Data Matters Privacy Blog.

Insurance 103

Insurance Security Cybersecurity Information Security 103

Hunton Privacy

FEBRUARY 22, 2017

million as part of a settlement with the New Jersey Division of Consumer Affairs (the “Division”) regarding allegations that Horizon did not adequately protect the privacy of nearly 690,000 policyholders. The policyholder data was password protected but not encrypted, in violation of HIPAA and HITECH.

Insurance 45

Insurance Privacy Encryption Passwords 45

eSecurity Planet

MAY 26, 2023

Confidential computing is a technology and technique that encrypts and stores an organization’s most sensitive data in a secure portion of a computer’s processor — known as the Trusted Execution Environment (TEE) — while it’s processed and in use. Most other encryption approaches protect data at rest and data in transit only.

Encryption 90

Encryption Cloud IoT Blockchain 90

The Last Watchdog

AUGUST 1, 2019

That includes social security and social insurance numbers, bank account numbers, phone numbers, birth dates, email addresses and self-reported income; in short, just about everything on an identity thief’s wish list. Best security and privacy practices on everyone’s part is more imperative than ever. This was the Perfect Storm.

Data Privacy 198

Data Privacy Privacy Data breaches Cloud 198

Thales Cloud Protection & Licensing

JANUARY 16, 2024

That includes banks, insurances, payment institutions, stock market, and many financial management firms (trading, crypt-assets, etc). Key Management System (KMS) are “dedicated control systems” that protect cryptographic keys, define role-based access controls and policies, and enforce them by mean of encryption.

Financial Services 83

Financial Services Cloud Cybersecurity Encryption 83

Thales Cloud Protection & Licensing

JUNE 15, 2023

The most effective way to ensure data security is through encryption and proper key management. Key Management as a Service (KMaaS) allows companies to manage encryption keys more effectively through a cloud-based solution instead of running the service on physical, on-premises hardware.

Encryption 133

Encryption Compliance Cloud Authentication 133

DLA Piper Privacy Matters

MAY 5, 2020

Main takeaways from the EDBP guidelines are: Connected vehicles raise various privacy and data protection concerns, such as the lack of control and information asymmetry, the risk of excessive data collection; the risk of unlawful further processing of personal data; Most data associated with connected vehicles are considered as personal data (e.g.

Privacy 69

Privacy Personal data GDPR Insurance 69

Data Matters

MARCH 12, 2019

Over the last few years, States have enacted increasingly aggressive legislation concerning data privacy and security, raising concerns that companies will be subject to a patchwork of different standards. Other Notable Changes. The proposed changes would amend the Rule to reflect this change.

Privacy 68

Privacy IT Information Security Insurance 68

The Last Watchdog

OCTOBER 5, 2023

Editor’s note: I recently had the chance to participate in a discussion about the overall state of privacy and cybersecurity with Erin Kapczynski, OneRep’s senior vice president of B2B marketing. OneRep provides a consumer service that scrubs your personal information from Google and dozens of privacy-breaching websites.

Cybersecurity 203

Cybersecurity Privacy Cloud IoT 203

Hunton Privacy

NOVEMBER 13, 2023

DMS did not detect the attack until after the ransomware was used to encrypt its files in December 2018. DMS is a HIPAA business associate (“BA”) that provides payer credentialing and medical billing services to HIPAA Covered Entities (“CEs”).

Ransomware 72

Ransomware Risk Insurance Encryption 72

Hunton Privacy

JULY 1, 2022

Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation. In addition to the monetary penalty of $5 million, NYDFS also accepted Carnival’s surrender of its insurance producer license; thus, Carnival has ceased selling insurance in New York.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Hunton Privacy

OCTOBER 15, 2021

The Division of Consumer Affairs alleged that the fertility clinic violated the New Jersey Consumer Fraud Act and the federal Health Insurance Portability and Accountability Act’s (“HIPAA”) Privacy and Security Rules by removing protected health information (“PHI”) safeguards.

Data breaches 103

Data breaches Privacy Insurance Information Security 103

IT Governance

NOVEMBER 20, 2023

Records breached: Unknown ALPHV/BlackCat attacks MeridianLink then reports it to the SEC Date of breach: 7 November Breached organisation: MeridianLink Incident details: The ALPHV/BlackCat ransomware group has added the software company MeridianLink to its leak site, having exfiltrated data without encrypting company systems.

Data Privacy 52

Data Privacy Privacy Data breaches Security 52

Thales Cloud Protection & Licensing

NOVEMBER 9, 2021

The increasing legal exposure for global enterprises that need to comply with more and more security privacy regulations. Shared responsibility is about controlling your own security – anything from data encryption to managing the encryption keys. These trends are: The massive amount of data produced by organizations.

Cloud 123

Cloud Security Encryption Insurance 123

Hunton Privacy

JANUARY 16, 2021

The Court held that OCR’s civil monetary penalty for alleged violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule and HIPAA Security Rule was “arbitrary, capricious, and otherwise unlawful.”. The United States Court of Appeals for the Fifth Circuit recently vacated a $4.3

Encryption 71

Encryption Privacy Insurance Security 71

The Last Watchdog

OCTOBER 26, 2021

With digital transformation leading to a boom in the use of digital certificates, our bedrock authentication and encryption framework is at an inflection point, where the demand and adoption of automation is set to rapidly accelerate to keep up with technology requirements.

Digital transformation 230

Digital transformation Compliance Encryption Authentication 230

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. What Encryption Is and How It Relates to Cryptology The science of cryptography studies codes, how to create them, and how to solve them. How Does Encryption Process Data? How Does Encryption Process Data?

Encryption 110

Encryption IT Passwords IoT 110

Hunton Privacy

FEBRUARY 3, 2017

million civil monetary penalty against Children’s Medical Center of Dallas (“Children’s”) for alleged ongoing violations of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy and Security Rules, following two consecutive breaches of patient electronic protected health information (“ePHI”).

Privacy 40

Privacy Security Insurance Encryption 40

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

DLA Piper Privacy Matters

AUGUST 23, 2021

Rather than bringing substantial changes to the existing China data privacy framework, the PIPL helpfully consolidates and clarifies obligations on processing of personal information at a national law level. To be clear, this is not China’s own GDPR.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Armstrong Archives

AUGUST 25, 2023

The Health Insurance Portability and Accountability Act (HIPAA) ensures individuals’ health data protection and privacy. This includes insurance companies, nurses, and doctors. It’s all about creating the perfect balance between optimal medical services while upholding patient privacy.

Computer and Electronics 52

Computer and Electronics Insurance Compliance Risk 52

Data Protection Report

APRIL 30, 2024

Its privacy policy stated that the company would treat the data confidentially, and the company would not share data without user consent. In December 2020, the company revised its privacy policy (increasing its size to 15 pages) and added a statement that it used Facebook Pixel, a web analytics and advertising service by Facebook, Inc.

Personal data 85

Personal data Privacy Information governance Compliance 85

Hunton Privacy

JANUARY 13, 2016

(“Schein”), agreed to settle FTC charges that accused the company of falsely advertising the level of encryption it used to protect patient data. The FTC asserted that, in 2012, the Dentrix G5 software incorporated a third party database engine that included a form of data protection that Schein advertised as “encryption.”

Encryption 40

Encryption Insurance Data breaches Privacy 40

Thales Cloud Protection & Licensing

FEBRUARY 15, 2023

Double extortion ransomware is a growing type of cyber-attack in which a victim’s sensitive data is first stolen, and then encrypted, giving the criminal the option of demanding two separate ransom payments. With privacy becoming a top priority for many citizens across the globe, revelations of this type create a wave of distrust and fury.

Ransomware 71

Ransomware Encryption Security awareness Cybersecurity 71

eSecurity Planet

OCTOBER 5, 2021

The focus is on recovering deleted and encrypted files as quickly as possible. Determines the initial vector of infection, where your current data backups are, and the sensitivity of encrypted files. Data is recovered remotely or returned on encrypted media. Incident report for law enforcement and insurance. Proven Data.

Ransomware 139

Ransomware Encryption Cybersecurity Insurance 139

eSecurity Planet

OCTOBER 18, 2021

” Cyber Insurance No Longer Reliable. ” Crockett said unofficial numbers indicate that only about 10 percent of such cyber insurance claims are paid out. ” Crockett said unofficial numbers indicate that only about 10 percent of such cyber insurance claims are paid out.

Ransomware 102

Ransomware Insurance Digital transformation Cybersecurity 102

Thales Cloud Protection & Licensing

MARCH 6, 2018

Some impact specific countries while others focus on individual industries, but each regulation being enforced is an indication that companies must be more accountable when it comes to how they manage data privacy and people’s data or they risk having to pay large fines. How can your company comply with these data privacy regulations?

Compliance 88

Compliance GDPR Encryption Data Privacy 88

Data Matters

FEBRUARY 6, 2019

The stolen information allegedly included names and identifying information, hashed passwords, security questions and answers, family information, Social Security numbers, lab results, health insurance information, doctor’s names, and medical conditions, among other things.

Data breaches 83

Data breaches Computer and Electronics Security Insurance 83

Data Matters

AUGUST 27, 2020

Department of Health and Human Services, Office for Civil Rights (“OCR”) has settled three cases related to alleged violations of the Health Insurance Portability and Accountability Act (“HIPAA”), totaling $1,165,000. In particular, OCR has focused on the following elements the Security Rule: Encryption practices designed to protect ePHI.

Compliance 68

Compliance Security Risk Encryption 68

IT Governance

NOVEMBER 1, 2022

Mexico confirms hack of military records (unknown) Randolph-area school district disables its own website following transphobic hack (unknown) Australia’s Telstra hit by data breach, two weeks after attack on Optus (unknown) Patient details compromised in cyber attack on health provider Pinnacle (unknown) CHI Health faces ‘IT security incident’ impacting (..)

Data breaches 111

Data breaches Ransomware Insurance Phishing 111

Data Protection Report

JANUARY 23, 2020

The case was brought by an English insurer (requesting anonymity) against four defendants, consisting of unknown cyber-extortionists (as well as three other parties who respectively hold and/or trade Bitcoins). The claim related to a customer of the Insurer whose data and systems had been encrypted and bitcoin ransom payment demanded.

Insurance 79

Insurance Encryption IT Cybersecurity 79