Encryption and Personal data - Information Management Today

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

APRIL 30, 2024

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The order also, in Section IX, set forth data destruction requirements and a data retention policy.

Personal data

Personal data Privacy Information governance Compliance

CNIL Published Guidelines on Re-Use of Personal Data by Data Processors

Hunton Privacy

JANUARY 20, 2022

On January 12, 2022, the French Data Protection Authority (the “CNIL”) published guidelines on the re-use of personal data by data processors for their own purposes (such as product improvement or the development of new products and services) under the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”).

Personal data

Personal data GDPR Encryption IT

How to Address the Requirements of Personal Data Protection (PDP) Law of Indonesia

Thales Cloud Protection & Licensing

FEBRUARY 1, 2023

How to Address the Requirements of Personal Data Protection (PDP) Law of Indonesia divya Thu, 02/02/2023 - 06:35 In response to the increased number of attacks targeting the personal data of millions of Indonesian citizens, the government passed the first Personal Data Protection (PDP) Law in 2022.

Personal data

Personal data Encryption Data breaches Authentication

Webinars

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

MORE WEBINARS

A data ‘black hole’: Europol ordered to delete vast store of personal data

The Guardian Data Protection

JANUARY 10, 2022

EU police body accused of unlawfully holding information and aspiring to become an NSA-style mass surveillance agency The EU’s police agency, Europol, will be forced to delete much of a vast store of personal data that it has been found to have amassed unlawfully by the bloc’s data protection watchdog.

Personal data

Personal data Big data Libraries Encryption

Personal data protection in the time of coronavirus (Covid-19)

Data Protection Report

FEBRUARY 25, 2020

Outbreak of the coronavirus and personal data privacy. There have been several data breach incidents which have given rise to concerns over privacy and potential discrimination against people from Wuhan and Hubei Province. Highlights of the CAC Circular.

Personal data

Personal data Big data Data Privacy Data breaches

Belgian Council of State Considers Encryption a Sufficient Measure for U.S. Data Transfers

Hunton Privacy

SEPTEMBER 9, 2021

In addition, for data transfers to the U.S., law does not generally provide a level of data protection equivalent to EU law. As a result, transfers of personal data to the U.S. in certain circumstances, including where the encryption keys are kept under the full control of the data controller.

Encryption

Encryption GDPR Personal data Cloud

Spotlight: ShardSecure on Protecting Data At Rest Without Encryption

The Security Ledger

JANUARY 14, 2022

Host Paul Roberts speaks with Marc Blackmer of ShardSecure about that company’s new approach to protecting data at rest, which relies on fragmenting and scattering data to make it impossible to steal. The post Spotlight: ShardSecure on Protecting Data At Rest Without Encryption appeared first on The Security Ledger with Paul F.

Encryption

Encryption Cloud Marketing Data breaches

How the new Spirion-Thales partnership enables sensitive-data-centric encryption

Thales Cloud Protection & Licensing

JUNE 29, 2022

How the new Spirion-Thales partnership enables sensitive-data-centric encryption. To meet the challenges of modern perimeterless, data-driven enterprises, it’s no longer enough to lock down the network. The security must be embedded with the data wherever it travels. Thales CipherTrust Transparent Encryption.

Encryption

Encryption Big data Cloud Access

Transferring personal data under the GDPR

IT Governance

JANUARY 3, 2018

This is a particularly pressing concern with the EU General Data Protection Regulation (GDPR) taking effect this year. The GDPR strengthens EU residents’ rights concerning their personal data and applies to all organisations in the world that process such data. Data transfers. Pseudonymisation and encryption.

Personal data

Personal data GDPR Encryption Data breaches

Two FTC complaints that over-retention of personal data violates Section 5

Data Protection Report

FEBRUARY 13, 2024

In both cases, the FTC’s complaint alleged that the companies retained personal data for longer than was necessary, and that conduct violated Section 5 of the Federal Trade Commission Act as an unfair act or practice. According to paragraph 9 of the FTC complaint, Blackbaud did not encrypt database backup files.

Personal data

Personal data Privacy Marketing Data collection

GDPR: What’s the difference between personal data and sensitive data?

IT Governance

JULY 29, 2019

Now that the EU GDPR (General Data Protection Regulation) has been in effect for over a year, you’ve likely become acquainted with the term ‘personal data’ But what exactly does personal data mean? What is personal data? What is sensitive personal data? A home address.

Personal data

Personal data GDPR Encryption Compliance

China Implements Regulation Increasing Protections for Children’s Personal Data

Data Matters

OCTOBER 15, 2019

On 22 August 2019, the Cyberspace Administration of China (CAC) announced the implementation of the Online Protection of Children’s Personal Data Regulation (????????????), (“the Regulation”) which came into force on 1 October 2019. In contrast with COPPA in the U.S., Consequences of the Regulation.

Personal data

Personal data Privacy Compliance Cybersecurity

The GDPR: Requirements for encryption

IT Governance

NOVEMBER 13, 2018

Six months since the GDPR (General Data Protection Regulation) came into force, pseudonymisation and data encryption remain the only technology measures specifically mentioned in the famously technology-agnostic Regulation. But what exactly is meant by ‘pseudonymisation’ and ‘encryption’? What is encryption?

Encryption

Encryption GDPR Personal data Risk

The ICO urges organisations to start using privacy enhancing technologies to share personal data safely, securely and anonymously

Data Protection Report

JUNE 26, 2023

The Guidance sits alongside the ICO’s recommendation that organisations should, if they haven’t already, start using PETs to share personal data safely, securely and anonymously. The Guidance clarifies that there is no definition of PETs within data protection law and that the concept covers various technologies and techniques.

Personal data

Personal data Privacy Security Compliance

ITALY: the Garante aligns with CNIL and DSB holding that the use of Google Analytics leads to unlawful transfer of Personal Data

DLA Piper Privacy Matters

JUNE 27, 2022

The Italian privacy authority, the Garante, deemed that the use of Google Analytics results in unlawful transfers of personal data to the United States in violation of the principles outlined in the Schrems II ruling. In Order No. The disputed facts. Code § 1881(b)(4), which subjects the company to the surveillance of U.S.

Personal data

Personal data Analytics GDPR Privacy

Five Eyes nations plus India and Japan call for encryption backdoor once again

Security Affairs

OCTOBER 13, 2020

Members of the Five Eyes intelligence alliance once again call for tech firms to engineer backdoors into end-to-end and device encryption. The statements reinforce the importance of the encryption in protecting data, privacy, and IP, but highlights the risks of abusing it for criminal and terrorist purposes. Pierluigi Paganini.

Encryption

Encryption Data Privacy Privacy Personal data

The GDPR: Do you know the difference between personal data and sensitive data?

IT Governance

JULY 18, 2018

Now that the EU GDPR (General Data Protection Regulation) has been in effect for a couple of months, you’ve hopefully become acquainted with its definition of personal data: “any information relating to an identified or identifiable natural person”. What is personal data? Location data. IP address.

Personal data

Personal data GDPR Encryption Compliance

Consumers have their Say about Protection of Personal Data – Call for More Stringent Controls

Thales Cloud Protection & Licensing

OCTOBER 10, 2022

Consumers have their Say about Protection of Personal Data – Call for More Stringent Controls. I think the survey makes it clear that many people that have suffered a data breach want organisations to take clear steps to minimise the risk of future breaches. Tue, 10/11/2022 - 06:46.

Personal data

Personal data Data breaches Government Authentication

Over 80 US Municipalities’ Sensitive Information, Including Resident’s Personal Data, Left Vulnerable in Massive Data Breach

Security Affairs

JULY 23, 2021

There was no need for a password or login credentials to access this information, and the data was not encrypted. The data of these municipalities was stored in several misconfigured Amazon S3 buckets that were sharing similar naming conventions to MapsOnline. What’s Happening? Pierluigi Paganini.

Personal data

Personal data Data breaches Phishing Government

British Airways E-Ticketing Flaw Exposes Passenger Flight, Personal Data

Threatpost

AUGUST 13, 2019

A vulnerability in British Airways' e-ticketing system could enable a bad actor to view passengers' personal data or change their booking information.

Personal data

Personal data Encryption Data breaches Data Privacy

Russian govn blocked Tutanota service in Russia to stop encrypted communication

Security Affairs

FEBRUARY 17, 2020

Tutanota , the popular free and open-source end-to-end encrypted email software, has been blocked by Russian authorities. The popular free and open-source end-to-end encrypted email service Tutanota has been blocked in Russia on Friday evening. ” states Tutanota. Pierluigi Paganini. SecurityAffairs – Tutanota, Russia).

Encryption

Encryption Communications Government Personal data

Singapore’s Public Consultation on proposed changes to the Singapore Personal Data Protection Act

Data Protection Report

MAY 21, 2020

On 14 May 2020, the Singapore Ministry of Communications and Information ( MCI ) and the Personal Data Protection Commission of Singapore ( PDPC ) announced a public consultation (the Public Consultation ) on the draft Personal Data Protection (Amendment) Bill (the Draft Bill ) and related amendments to the Spam Control Act ( SCA ).

Personal data

Personal data Data breaches Compliance Cybersecurity

Slack Launched Encryption Key Addon For Businesses

Security Affairs

MARCH 18, 2019

Slack announced today to launch encryption keys that will help businesses to protect their data. Slack announced today to launch encryption keys that will help businesses to protect their data. Slack announced today to launch encryption keys that will help businesses to protect their data. Third Party Apps.

Encryption

Encryption Risk Financial Services Privacy

Article 29 Working Party Publishes Draft Guidelines on Notification of Personal Data Breaches Notification Under the GDPR

Data Matters

OCTOBER 31, 2017

The WP29 is a collective of EU data privacy supervisory authorities (“ DPAs ”). The WP29 guidance regarding personal data breaches has been long awaited. ransomware attack that encrypts the sole copy of relevant personal data); or (iii) unauthorized or accidental alteration of personal data.

Personal data

Personal data Data breaches GDPR Risk

Cyber Security Awareness Month – Answering Google’s Most Commonly Asked Questions

Thales Cloud Protection & Licensing

OCTOBER 17, 2023

Encryption, data sovereignty, multifactor authentication and website cookies are all vital ideas and technologies to keep consumers’ personal data safe – but research released this month reveals widespread confusion. It's about keeping your data under your home country's control and protection.

Security awareness

Security awareness Security Passwords Authentication

Making the Case for Encryption in the Era of Digital Transformation – Highlights from our Annual Data Threat Report

Thales Cloud Protection & Licensing

JANUARY 29, 2019

Today, it’s almost impossible to do business of any kind without some sensitive data being exchanged, managed or stored in the cloud or on servers with an outgoing connection to the web. In fact, 71% of organizations are using sensitive data in the cloud. The importance of encryption cannot be overstated.

Digital transformation

Digital transformation Encryption Cloud Customer Experience

European rulings on the use of Google Analytics and how it may affect your business

Data Protection Report

FEBRUARY 14, 2022

At issue was the transfer of personal data from the EU to the US through the use of Google Analytics. Cookies are only one of many ways to collect/transfer data, meaning Google Analytics and similar services can receive personal data through other means. www.website.com/pg1/?

Analytics

Analytics GDPR Personal data IT

FTC Proposes Settlement with Blackbaud in Connection with Alleged Security Failures

Hunton Privacy

FEBRUARY 6, 2024

(“Blackbaud”) in connection with alleged security failures that resulted in a breach of the company’s network and access to the personal data of millions of consumers.

Personal data

Personal data Security Data breaches Encryption

ICO Fines International Airline Cathay Pacific GBP 500,000 (Maximum Available) for Failing to Secure Customers’ Personal Data

Hunton Privacy

MARCH 5, 2020

On March 4, 2020, the UK Information Commissioner’s Office (“ICO”) fined the international airline Cathay Pacific Airways Limited (“Cathay Pacific”) £500,000 for failing to protect the security of its customers’ personal data. The fine was issued under the Data Protection Act 1998 (the “DPA”) and represents the maximum fine available.

Personal data

Personal data Security Authentication Access

[Sponsored Content] The State of Encryption and How to Improve It

Dark Reading

DECEMBER 13, 2018

Encryption and access controls are considered to be the ultimate safeguards to ensure the security and confidentiality of data, which is why they're mandated in so many compliance and regulatory standards.

Encryption

Encryption Data breaches Personal data IT

Encryption – A Feasible Savior against Prevalent Privacy Issues in Business Communication

Security Affairs

OCTOBER 26, 2019

Even though encryption should be taken seriously by businesses of all sizes, only a small fraction of the corporate sector puts their back on it. Why is Encryption a Feasible Option against Digital Threats? Encryption plays an integral role in securing the online data as well as its integrity. Final Thoughts.

Encryption

Encryption Communications Privacy Cybersecurity

DEEP TECH NEWS: Respecting individual rights by using ‘privacy preserving aggregate statistics’

The Last Watchdog

JANUARY 28, 2024

Related: The role of ‘attribute based encryption’ There’s nothing intrinsically wrong with companies seeking to better understand their customers. However, over the past 20 years the practice of analyzing user data hasn’t advanced much beyond serving the business models of these tech giants.

Privacy

Privacy Data Privacy GDPR Personal data

National Logistics Portal (NLP) data leak: seaports in India were left vulnerable to takeover by hackers

Security Affairs

OCTOBER 2, 2023

On September 24th, researchers discovered that the NLP platform was exposing sensitive credentials, secrets, and encryption keys via publicly available JS files. The buckets contained the personal data of workers, marine crew, invoices, and internal documents. This poses a grave danger of ransomware attacks.

Encryption

Encryption Risk Personal data Access

A Guide to Key Management as a Service

Thales Cloud Protection & Licensing

JUNE 15, 2023

A Guide to Key Management as a Service madhav Thu, 06/15/2023 - 11:29 As companies adopt a cloud-first strategy and high-profile breaches hit the headlines, securing sensitive data has become a paramount business concern. The most effective way to ensure data security is through encryption and proper key management.

Encryption

Encryption Compliance Cloud Authentication

GDPR: Data transfers outside the EU – what are the rules?

IT Governance

JULY 29, 2019

The EU General Data Protection Regulation (GDPR) restricts transfers of personal data to countries outside the EEA. A transfer is defined as restricted if: 1) The GDPR applies to your processing of the personal data you are transferring. Pseudonymisation and encryption. Originally published Jan 04, 2018.

GDPR

GDPR Personal data Encryption Data breaches

Takeaways from 100th Anniversary Meeting of German Data Protection Authorities

Hunton Privacy

DECEMBER 2, 2020

With regards to the telemetry functions, a DSK working group had previously determined in three test scenarios that data controllers use the “security” telemetry level when using the Enterprise version, and as a result, should take contractual, technical or organizational measures to ensure that no personal data is transmitted to Microsoft.

Encryption

Encryption Personal data Communications Access

Microsoft Outlines Digital ID Plan Using Blockchain

Data Breach Today

FEBRUARY 16, 2018

Encrypted ID 'Hubs' Will Safely Store Personal Data After a year of brainstorming on blockchain technology, Microsoft says it will add support in its Authenticator app for a decentralized identity system that's designed to put users in control of their personal information.

Blockchain

Blockchain Personal data Encryption Authentication

Data privacy examples

IBM Big Data Hub

APRIL 24, 2024

These are just some examples of how organizations support data privacy , the principle that people should have control of their personal data, including who can see it, who can collect it, and how it can be used. One cannot overstate the importance of data privacy for businesses today.

Data Privacy

Data Privacy Privacy GDPR Personal data

FRANCE: The CNIL provides further insights following its formal notices against the use of Google Analytics

DLA Piper Privacy Matters

JUNE 13, 2022

The setup of Google Analytics does not prevent the transfer of personal data outside the EU since all personal data collected via Google Analytics is hosted in the US. As an alternative, the CNIL recommends controllers to use a solution that does not transfer personal data outside the EU.

Analytics

Analytics IT Personal data Encryption

Data Privacy and Security: It Takes Two to Tango

Thales Cloud Protection & Licensing

JANUARY 24, 2022

During the past two years we have witnessed a massive migration of data, applications, and services to the cloud. It is important to understand that nowadays almost all our data – including our personal data, like banking information, medical records, and personal emails – are stored and processed in the cloud.

Data Privacy

Data Privacy Privacy IT Security

Cybersecurity Awareness Month: Resilient Multi-factor Authentication (MFA) and Strong Passwords

Thales Cloud Protection & Licensing

OCTOBER 4, 2022

The purpose of these events is to raise awareness about digital security and empower everyone to protect their personal data from digital forms of crime by adopting well established best practices, like the use of Multi-Factor Authentication (MFA) and establishing strong passwords. Raising awareness is essential for everyone.

Authentication

Authentication Passwords Cybersecurity Personal data

UK ICO fines hotel chain giant Marriott over data breach

Security Affairs

NOVEMBER 2, 2020

. “The ICO has fined Marriott International Inc £18.4million for failing to keep millions of customers’ personal data secure.” ” In July 2019, the UK’s data privacy regulator announced that the giant hotel chain Marriott International faces a £99 million ($123 million) fines under GDPR over 2014 data breach.

Data breaches

Data breaches Personal data GDPR Encryption

The Week in Cyber Security and Data Privacy: 16–22 October 2023

IT Governance

OCTOBER 24, 2023

Records breached: Unknown, but sensitive personal data was probably breached. BHI Energy Announces Data Breach Affecting Confidential Information of 91k Individuals Date of breach: 29 June 2023 (filed notice with the Attorney General of Maine on 18 October 2023). It’s unclear whether personal data has been breached.

Data Privacy

Data Privacy Privacy Security Data breaches

NYDFS Imposes Fine of $5 Million on Carnival for Cybersecurity Breaches

Hunton Privacy

JULY 1, 2022

In its consent order , the Department noted that the cybersecurity events had caused the exposure of a substantial amount of sensitive personal data belonging to Carnival’s customers, including those residing in New York.

Cybersecurity

Cybersecurity Insurance Phishing Financial Services

$10,000,000 civil penalty for disclosing personal data without consent

CNIL Published Guidelines on Re-Use of Personal Data by Data Processors

Webinars

Trending Sources

How to Address the Requirements of Personal Data Protection (PDP) Law of Indonesia

Webinars

A data ‘black hole’: Europol ordered to delete vast store of personal data

Personal data protection in the time of coronavirus (Covid-19)

Belgian Council of State Considers Encryption a Sufficient Measure for U.S. Data Transfers

Spotlight: ShardSecure on Protecting Data At Rest Without Encryption

How the new Spirion-Thales partnership enables sensitive-data-centric encryption

Transferring personal data under the GDPR

Two FTC complaints that over-retention of personal data violates Section 5

GDPR: What’s the difference between personal data and sensitive data?

China Implements Regulation Increasing Protections for Children’s Personal Data

The GDPR: Requirements for encryption

The ICO urges organisations to start using privacy enhancing technologies to share personal data safely, securely and anonymously

ITALY: the Garante aligns with CNIL and DSB holding that the use of Google Analytics leads to unlawful transfer of Personal Data

Five Eyes nations plus India and Japan call for encryption backdoor once again

The GDPR: Do you know the difference between personal data and sensitive data?

Consumers have their Say about Protection of Personal Data – Call for More Stringent Controls

Over 80 US Municipalities’ Sensitive Information, Including Resident’s Personal Data, Left Vulnerable in Massive Data Breach

British Airways E-Ticketing Flaw Exposes Passenger Flight, Personal Data

Russian govn blocked Tutanota service in Russia to stop encrypted communication

Singapore’s Public Consultation on proposed changes to the Singapore Personal Data Protection Act

Slack Launched Encryption Key Addon For Businesses

Article 29 Working Party Publishes Draft Guidelines on Notification of Personal Data Breaches Notification Under the GDPR

Cyber Security Awareness Month – Answering Google’s Most Commonly Asked Questions

Making the Case for Encryption in the Era of Digital Transformation – Highlights from our Annual Data Threat Report

European rulings on the use of Google Analytics and how it may affect your business

FTC Proposes Settlement with Blackbaud in Connection with Alleged Security Failures

ICO Fines International Airline Cathay Pacific GBP 500,000 (Maximum Available) for Failing to Secure Customers’ Personal Data

[Sponsored Content] The State of Encryption and How to Improve It

Encryption – A Feasible Savior against Prevalent Privacy Issues in Business Communication

DEEP TECH NEWS: Respecting individual rights by using ‘privacy preserving aggregate statistics’

National Logistics Portal (NLP) data leak: seaports in India were left vulnerable to takeover by hackers

A Guide to Key Management as a Service

GDPR: Data transfers outside the EU – what are the rules?

Takeaways from 100th Anniversary Meeting of German Data Protection Authorities

Microsoft Outlines Digital ID Plan Using Blockchain

Data privacy examples

FRANCE: The CNIL provides further insights following its formal notices against the use of Google Analytics

Data Privacy and Security: It Takes Two to Tango

Cybersecurity Awareness Month: Resilient Multi-factor Authentication (MFA) and Strong Passwords

UK ICO fines hotel chain giant Marriott over data breach

The Week in Cyber Security and Data Privacy: 16–22 October 2023

NYDFS Imposes Fine of $5 Million on Carnival for Cybersecurity Breaches

Stay Connected