Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. See 45 CFR 164.306(e): Maintenance.

Cybersecurity 88

Cybersecurity Privacy Insurance Risk 88

Data Matters

FEBRUARY 20, 2019

On January 18, 2019, the New York State Department of Financial Services (NYDFS) issued Circular Letter 2019-1 (the Circular Letter), addressing insurers’ use of external consumer data and information sources in underwriting for life insurance.

Insurance 68

Insurance Financial Services Compliance Retail 68

Data Protection Report

JUNE 14, 2022

As privacy incidents and security breaches involving personal information become increasingly frequent, organizations are more and more aware of the importance of implementing a robust privacy program to mitigate the risks and impacts of such incidents. Legal Obligations. Procedural Considerations.

Privacy 52

Privacy Data breaches Compliance Financial Services 52

Data Matters

JANUARY 28, 2022

Other government agencies, like the New York Department of Financial Services and the Federal Trade Commission, are also increasingly focused on the need for broad implementation of MFA. Like an incident response plan, MFA has become a critical element of cybersecurity programs. The post U.S.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Data Protection Report

JANUARY 6, 2020

The Court of Justice of the European Union (CJEU) will determine the validity of the EU Standard Contractual Clauses (SCCs) ( Data Protection Commissioner v Facebook Ireland Limited, Maximillan Schrems ) whilst the General Court of the EU will consider the future of Privacy Shield (La Quadrature du Net v Commission). In the U.S.,

Privacy 84

Privacy GDPR Data breaches Risk 84

IBM Big Data Hub

DECEMBER 18, 2023

For organizations of all types—and especially those in highly regulated industries such as financial services, government, healthcare and telco—considerations including the rise of generative AI, evolving regulations and data sovereignty laws and ongoing security challenges must be top of mind.

Cloud 68

Cloud Financial Services Compliance Digital transformation 68

Hunton Privacy

FEBRUARY 7, 2023

As the nature of digital assets continues to evolve and develop, it is imperative that data privacy issues are considered and addressed in tandem with the development of financial services policy and regulation to ensure a coherent, comprehensive and practical regulatory approach that can support a trusted, open, innovative and competitive market.

Data Privacy 61

Data Privacy Blockchain Compliance Privacy 61

Data Matters

JANUARY 20, 2021

Office of the Comptroller of the Currency (OCC) issued its controversial final rule (Rule) 1 to establish a new requirement for covered banks to provide “fair access” to financial services to both natural persons and legal entities. 3) not deny, in coordination with others, any person a financial service the covered bank offers.

Access 68

Access Financial Services Marketing Risk 68

Collibra

FEBRUARY 11, 2020

Regulators are focusing on the data relationships financial services organizations have with third parties, including how well personal information is being managed. For example, FinTech and RegTech companies are very interested in working with companies that have a strong framework for managing data, including personal data. .

Financial Services 59

Financial Services Digital transformation Personal data Compliance 59

Collibra

OCTOBER 31, 2023

With every financial services organization focused on making better and faster decisions, data professional and business leaders are eager to better understand how AI can facilitate their strategic goals. Financial services orgs, especially those in capital markets, frequently has been on the forefront of generative AI investment.

Marketing 90

Marketing Government Financial Services Artificial Intelligence 90

Data Protection Report

DECEMBER 23, 2019

This blogpost summarises our recent webinar: “ An urgent message from Berlin: The importance of record retention in privacy and cybersecurity ”. The authority claimed a violation of data minimisation and privacy by design principles under the EU General Data Protection Regulation (GDPR). . Why should this be a high priority project?

Privacy 144

Privacy Compliance Personal data Risk 144

IBM Big Data Hub

SEPTEMBER 20, 2023

When implemented in a responsible way—where the technology is fully governed, privacy is protected and decision making is transparent and explainable—AI has the power to usher in a new era of government services. AI’s value is not limited to advances in industry and consumer products alone.

Government 107

Government Artificial Intelligence Privacy Digital transformation 107

Data Protection Report

JANUARY 6, 2020

The Court of Justice of the European Union (CJEU) will determine the validity of the EU Standard Contractual Clauses (SCCs) ( Data Protection Commissioner v Facebook Ireland Limited, Maximillan Schrems ) whilst the General Court of the EU will consider the future of Privacy Shield (La Quadrature du Net v Commission). In the U.S.,

Privacy 52

Privacy GDPR Data breaches Risk 52

Data Matters

JANUARY 2, 2018

This past year was marked by ever more significant data breaches, growing cybersecurity regulatory requirements at the state and federal levels and continued challenges in harmonizing international privacy and cybersecurity regulations. As we begin this New Year, here is list of the top 10 privacy and cybersecurity issues for 2018: EU GDPR.

Cybersecurity 68

Cybersecurity Privacy Data breaches GDPR 68

HL Chronicle of Data Protection

OCTOBER 25, 2019

Privacy Shield. continues to provide an adequate level of protection for personal data transferred under the Privacy Shield from the EU to participating companies in the U.S. The EU-US Privacy Shield is reviewed on a yearly basis, to assess that it continues to ensure an adequate level of protection of personal data. Background.

Privacy 40

Privacy IT Personal data Financial Services 40

AIIM

MAY 19, 2020

Or maybe into privacy? For example, the U.S. financial services sector is different in practice than RM for a law firm, or a Canadian municipal government, or a multinational energy firm. International Association of Privacy Professionals (IAPP). Examples in the U.S. You should!)

Records Management 170

Records Management Privacy Government Information governance 170

IBM Big Data Hub

FEBRUARY 5, 2024

The Digital Operational Resilience Act (DORA) marks a significant milestone in the European Union’s (EU) efforts to bolster the operational resilience of the financial sector in the digital age. Ensuring end-to-end Protection To achieve total data privacy assurance, a key component is confidential computing and cryptography.

Encryption 72

Encryption Data Privacy Compliance Cloud 72

Data Matters

OCTOBER 1, 2021

For example, we assess the business and reputational consequences associated with acquisitions of loan portfolios and institutions subject to the CFPB’s jurisdiction. Consumer financial services providers need to be aware of, and in compliance with, state consumer financial laws in addition to federal consumer financial laws.

Financial Services 158

Financial Services Compliance Risk Privacy 158

Krebs on Security

AUGUST 13, 2021

Come check out Antinalysis, the new address risk analyzer,” reads the service’s announcement, pointing to a link only accessible via ToR. “To date, this type of analysis has been used primarily by regulated financial service providers.” ” That may not be entirely true.

Blockchain 296

Blockchain Analytics Marketing Ransomware 296

HL Chronicle of Data Protection

DECEMBER 7, 2018

This is the ninth installment in Hogan Lovells’ series on the California Consumer Privacy Act. It does not exempt financial institutions altogether from its requirements where a financial information is processing information not subject to these regimes. The Privacy Rule provides examples of a “consumer” (12 C.F.R.

Privacy 40

Privacy Financial Services Compliance Data breaches 40

Data Matters

JUNE 12, 2020

The ANPR also focuses on critical new technologies such as distributed ledgers and artificial intelligence, asking, for example: “What types of activities related to cryptocurrencies or cryptoassets are financial services companies or bank customers engaged? Comments are due by August 3, 2020. The post The U.S.

Artificial Intelligence 68

Artificial Intelligence Blockchain Financial Services Computer and Electronics 68

IBM Big Data Hub

JANUARY 10, 2024

This unique capability is designed for workloads that have strong data sovereignty, regulatory or data privacy requirements. This is designed to enable multiple use cases in the healthcare industry, one being secure multi-party collaboration between different institutions as shown in the following example.

Security 76

Security Cloud Data Privacy Financial Services 76

eSecurity Planet

FEBRUARY 26, 2024

This typically happens on dynamic web pages, which frequently change or can be actively manipulated by users (for example, a search bar where users can type queries). Users don’t know the code on the financial services web page is malicious because it looks legitimate, and they continue using it until it’s exposed.

Risk 104

Risk Financial Services Security Libraries 104

Data Matters

AUGUST 17, 2021

On August 11, 2021, the Federal Financial Institutions Examination Council (FFIEC)1 issued guidance establishing risk management principles and practices to support the authentication of users accessing a financial institution’s information systems and customers accessing a financial institution’s digital banking services (the Guidance).

Authentication 88

Authentication Access Risk Financial Services 88

The Last Watchdog

SEPTEMBER 21, 2018

Poor configuration of cloud services can translate into gaping vulnerabilities—and low hanging fruit for hackers, the recent Tesla hack being a prime example. Compliance with existing and fresh data security and privacy rules and regulations is another variable driving companies to start introducing SecOps into their workflow.

Cloud 203

Cloud Security Mining Financial Services 203

IT Governance

AUGUST 26, 2021

Protecting employees’ privacy. For example, financial services firms may be worried about employees breaching insider trading laws. Although monitoring software comes with understandable privacy issues, remember that the GDPR (General Data Protection Regulation) doesn’t prohibit their use. Preventing data breaches.

Compliance 119

Compliance Data breaches Privacy Risk 119

The Last Watchdog

JUNE 15, 2023

for example, Microsoft merchant experiences with SCA under PSD2 ). W3C works on ensuring that all foundational Web technologies meet the needs of civil society, in areas such as accessibility, internationalization, security, and privacy.

Authentication 100

Authentication Communications Financial Services Retail 100

IBM Big Data Hub

JULY 26, 2023

If we think about asset maintenance, for example, the questions are which technicians are available, where, and how should their work be prioritized. This use case shows how AI can help by processing unstructured image and video data in addition to structured data in the previous examples. It’s not about minimizing travel.

Energy and Utilities 77

Energy and Utilities Agriculture Manufacturing Risk 77

AIIM

JANUARY 10, 2019

A potentially problematic challenge for industry and legislators is the apparent tension between privacy rights and the rapid adoption of blockchain-based applications which are expected to reach $10.6 There is a school of thought that blockchain is antithetical to and incompatible with safeguarding privacy rights.

Blockchain 115

Blockchain GDPR Privacy Personal data 115

Data Protection Report

MARCH 7, 2024

Note that the only difference between the two examples is the addition of IP addresses. These agreements would include not only sending covered data for storage to a company headquartered in a country of concern but also: Example 20. Example 22. Will there be some exempt financial transactions? patients. person users.

Access 58

Access Military Compliance Personal data 58

DLA Piper Privacy Matters

APRIL 20, 2021

This introduces a data lifecycle security framework, and represents the key guideline for handling personal and other financial information by financial institutions (i.e. similar to the PIS Specification, but focused on the banking and financial services industry). Level 1: public data. are fulfilled.

Compliance 111

Compliance Security Financial Services Data collection 111

Data Matters

DECEMBER 4, 2019

However, because of the potential to facilitate near-instant messaging, clearing and settlement, blockchain and cryptoassets have a particularly promising potential in a financial services context. 7 For example, of the type hypothesized by Ian Grigg (i.e., See paragraph 105. 3 Legal Statement at paragraph 103. See [link].

Blockchain 60

Blockchain Financial Services Healthcare Marketing 60

Data Matters

DECEMBER 4, 2019

However, because of the potential to facilitate near-instant messaging, clearing and settlement, blockchain and cryptoassets have a particularly promising potential in a financial services context. 7 For example, of the type hypothesized by Ian Grigg (i.e., See paragraph 105. 3 Legal Statement at paragraph 103. See [link].

Blockchain 60

Blockchain Financial Services Healthcare Marketing 60

Data Protection Report

DECEMBER 23, 2019

This blogpost summarises our recent webinar: “ An urgent message from Berlin: The importance of record retention in privacy and cybersecurity ”. The authority claimed a violation of data minimisation and privacy by design principles under the EU General Data Protection Regulation (GDPR). . Why should this be a high priority project?

Privacy 52

Privacy Compliance Personal data Risk 52

Hunton Privacy

JULY 5, 2023

On June 28, 2023, the New York Department of Financial Services (“NYDFS”) published an updated proposed Second Amendment (“Amendment”) to its Cybersecurity Regulation, 23 NYCRR Part 500. The new MFA requirements, for example, would be subject to the two-year transition period.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

AIIM

OCTOBER 15, 2018

In North America, e-signatures are based on multiple authentication aspects with a focus on knowledge-based authentication which cannot be applied in EU due to much stricter privacy regulations. Allianz – a global financial services and insurance company – is one of those organizations which had to rethink their approach on e-signatures.

Compliance 109

Compliance Insurance Digital transformation Authentication 109

ARMA International

APRIL 18, 2022

Certain sectors, such as banking, financial services, health, and insurance have their own data protection and privacy requirements. Enforcement of the Laws : The enforcement has been primarily focused on consumer or non-financial employee data (e.g., 4 Consumer Protection Privacy Act. 6 Colorado Privacy Act.

Personal data 100

Personal data GDPR Privacy Records Management 100