IT Governance

JUNE 13, 2019

If your organisation is subject to the GDPR (General Data Protection Regulation) , you’re probably aware of your requirement to “implement appropriate technical and organisational measures” to protect the personal data you hold. An essential principle of this is data protection by design and by default.

GDPR 91

GDPR Personal data Compliance Privacy 91

IT Governance

SEPTEMBER 6, 2022

Welcome to our September 2022 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over their personal data. The SMS contained a link to a login page that faithfully recreated Okta’s legitimate site. Get started.

Phishing 111

Phishing Access Education Personal data 111

DLA Piper Privacy Matters

OCTOBER 10, 2022

For example, the ML system could be used to determine likely trends of categories of persons to default on loan agreements through the processing of financial default information. During the development and training of their algorithms, ML systems begin to adapt and recognise patterns within its data.

Personal data 98

Personal data GDPR Privacy Marketing 98

Krebs on Security

DECEMBER 1, 2018

It means accepting that despite how many resources you expend trying to keep malware and miscreants out, all of this can be undone in a flash when users click on malicious links or fall for phishing attacks. We must pass laws that require data minimization, ensuring companies do not keep sensitive data that they no longer need.

Security 278

Security Passwords Personal data Phishing 278

IT Governance

MARCH 7, 2023

Welcome to our March 2023 review of phishing attacks, in which we explore the latest email scams and the tactics that cyber criminals use to trick people into handing over personal data. Rock ’em sock ’em robot phishing One of the biggest challenges with cyber threat protection is that crooks have practically unlimited resources.

Phishing 111

Phishing Artificial Intelligence Passwords Security 111

Hunton Privacy

SEPTEMBER 10, 2020

On September 7, 2020, the European Data Protection Board (“EDPB”) released draft Guidelines 07/2020 on the concepts of controller and processor in the EU General Data Protection Regulation (“GDPR”) (the “Guidelines”). It is not necessary that controllers have access to the personal data.

GDPR 95

GDPR Personal data Data breaches Compliance 95

Security Affairs

OCTOBER 20, 2020

This is where data privacy comes into play and organizations are looking for data privacy management softwares that can fulfill their data privacy needs, while complying with data regulations in order to avoid fines. Tracking Personal Data.

Data Privacy 99

Data Privacy Privacy GDPR Compliance 99

Data Matters

OCTOBER 26, 2021

However, as the ICO noted, these research purposes will still require safeguards on top of those already present in Article 89(1) of the UK GDPR to prevent a data subject’s personal data being used in unexpected ways. The ICO prefers recital 26, as it is linked to existing legislation and so is a more pragmatic option.

Government 97

Government GDPR IT Personal data 97

IT Governance

APRIL 25, 2023

Financially motivated malicious insiders Security experts often say that ‘personal data is the new currency’. That’s a slight exaggeration (good luck trying to pay rent with your email address), but the point remains: legitimate organisations and cyber criminals alike are trying to get their hands on personal data.

Data breaches 105

Data breaches Phishing Personal data Access 105

IT Governance

MAY 24, 2021

The victim will either download an attachment that contains malware, or they’ll click a link and hand over sensitive information, such as their login credentials or financial information. It’s updated quarterly with current examples of phishing scams and tactics to help reinforce your staff’s understanding of the threats they face.

Phishing 122

Phishing Data breaches Passwords Access 122

Data Matters

SEPTEMBER 24, 2019

The GDPR was designed to harmonize data protection laws across Europe and to protect EU residents’ data privacy rights; and, its coming triggered significant privacy and data protection compliance activities amongst organizations doing business in the EU and working with the personal data of EU residents.

Personal data 68

Personal data GDPR Data Privacy Privacy 68

DLA Piper Privacy Matters

MARCH 6, 2023

It also includes processing necessary for the performance of tasks that are “directly linked to” the public interest task. This includes for example HR management processing activities carried out by the body vested with the public interest task. GDPR can also be relied on. To comply with article 6.3

GDPR 98

GDPR Personal data Compliance IT 98

IT Governance

DECEMBER 13, 2018

This is the deadline given to you under the EU GDPR (General Data Protection Regulation) to report information security incidents to your supervisory authority. Data breaches only need to be reported if they “pose a risk to the rights and freedoms of natural living persons”. Not all breaches need to be reported.

Data breaches 110

Data breaches GDPR Personal data Compliance 110

Data Protection Report

DECEMBER 23, 2019

The most significant action came in October, when the Berlin Commissioner for Data Protection and Freedom of Information issued a €14.5million fine against German real estate company, Deutsche Wohnen SE, relating to the excessive retention of personal data. Or it could mean separate country or regional schedules.

Privacy 144

Privacy Compliance Personal data Risk 144

IT Governance

OCTOBER 15, 2019

See also: List of free GDPR resources and templates. GDPR: What’s the difference between personal data and sensitive data? There are also times when you must also complete a specific type of risk assessment, called a DPIA (data protection impact assessment) , to review the way you process personal data.

GDPR 71

GDPR Risk Compliance Personal data 71

IT Governance

OCTOBER 24, 2018

This is the deadline given to you under the EU GDPR (General Data Protection Regulation) to report information security incidents to your supervisory authority. Data breaches only need to be reported if they “pose a risk to the rights and freedoms of natural living persons”. Not all breaches need to be reported.

Data breaches 110

Data breaches GDPR Compliance Personal data 110

Thales Cloud Protection & Licensing

APRIL 16, 2019

On March 22, we learned through The New York Times that: The Federal Emergency Management Agency unnecessarily shared sensitive personal data of more than two million disaster victims with a contractor, subjecting that information to potential identity theft and fraud… 1. This is troubling to me on a number of levels.

Encryption 66

Encryption Personal data Government Access 66

Security Affairs

OCTOBER 15, 2018

In recent years, an often-used fraud method has been fake mobile applications: 36% of users are unable to distinguish between genuine and fake apps, and 60% of the latter request access to the user’s personal data. . Only 35% of them are official resources, however. Phishing remains one of the most common online fraud.

Marketing 79

Marketing Phishing Retail Cybersecurity 79

Thales Cloud Protection & Licensing

AUGUST 7, 2018

I decided to take that advice and put myself in the shoes of a customer and came up with a list of activities I’d like to see happen in the event that my person data was compromised in a breach. Connect me to useful resources. The post When It Comes to a Data Breach, How Do You Want to Be Notified?

Data breaches 63

Data breaches Retail IT Communications 63

The Last Watchdog

OCTOBER 19, 2021

Most of the people I know professionally and personally don’t spend a lot of time contemplating the true price we pay for the amazing digital services we’ve all become addicted to. I’ll use myself as a prime example. Each operates a closed platform designed to voraciously gather, store and monetize user data.

Blockchain 223

Blockchain Paper Access Cloud 223

IT Governance

NOVEMBER 28, 2023

There were also four incidents that “were among the most severe incidents the NCSC has had to manage (compared with one last year) due to the sustained disruption they caused and the victims’ links to critical infrastructure via supply chains”. Ultimately, resources are – of course – limited. I can’t deny that security is a cost.

Risk 52

Risk Compliance Government Security 52

HL Chronicle of Data Protection

JUNE 13, 2019

Article 2 of the draft Data Security Measures states that the provisions therein govern all sector data processing activities (including, but not limited to, data collection, retention, transfer, and processing and use), that use cyber technologies within the territory of the People’s Republic of China.

Personal data 40

Personal data IT Data collection Compliance 40

IT Governance

DECEMBER 20, 2022

Articles 5(1) and 5(2) state that personal data must be processed lawfully, fairly and in a transparent manner, and that the data controller must be able to demonstrate that it is doing so. Articles 24(1) and 32(1) state that organisations must implement appropriate technical and organisational measures to protect personal data.

Security 132

Security Data breaches Ransomware Military 132

DLA Piper Privacy Matters

DECEMBER 4, 2017

Under the General Data Protection Regulation (GDPR), companies that process large amounts of sensitive personal data or consistently monitor data subjects on a large scale will be required to appoint a data protection officer (DPO). That said, certain criminal law provisions may remain applicable also to a DPO.

GDPR 40

GDPR Compliance Personal data Privacy 40

IBM Big Data Hub

FEBRUARY 6, 2024

For example, a recent Kyndril study (link resides outside ibm.com) concluded that infrastructure failure can cost enterprises as much as USD 100,000 per hour, with application failure ranging from USD 500,000 to USD 1 million per hour.

Data breaches 89

Data breaches Phishing Cloud Ransomware 89

Security Affairs

JULY 28, 2020

This resource-consuming industry could hardly exist without decent funding flows, which, as Group-IB established, comes from illegal bookmakers, online casinos and alcohol suppliers, covering the costs of ? Because of how popular pirate websites are, they serve as platforms for distributing malware and stealing users’ money and personal data.

Marketing 66

Marketing IT Personal data Risk 66

Collibra

AUGUST 14, 2023

Our framework is informed by our definition of AI governance: AI governance is the application of rules, processes and responsibilities to drive maximum value from your automated data products by ensuring applicable, streamlined and ethical AI practices that mitigate risk, adhere to legal requirements and protect privacy.

Government 52

Government Risk Financial Services Compliance 52

Data Protection Report

DECEMBER 6, 2017

On October 28, 2017, the Turkish Data Protection Authority (the “ Authority ”) published an important regulation supplementing the Law on Protection of Personal Data (the “ Data Protection Law ”), namely the Regulation on the Deletion, Destruction and Anonymization of Personal Data (the “ Regulation ”).

Personal data 40

Personal data Paper Encryption Cloud 40

Data Protection Report

MAY 23, 2018

The European Commission Fact Sheet and Q&A includes statistics that nine out of ten Europeans have expressed concern about mobile apps collecting their data without their consent, and seven out of ten worry about the potential use that companies may make of the information disclosed. Challenge #1. Challenge #3.

GDPR 40

GDPR Personal data Compliance Data breaches 40

IT Governance

APRIL 17, 2019

But that’s just one example of cutting-edge technology sweeping the hotel industry, with many organisations leveraging IoT (Internet of Things) and other ‘smart’ tech to give customers a taste of the future. It therefore makes sense that organisations plough whatever resources they have into addressing these concerns.

IT 75

IT Data breaches Privacy Information Security 75

Data Protection Report

DECEMBER 23, 2019

The most significant action came in October, when the Berlin Commissioner for Data Protection and Freedom of Information issued a €14.5million fine against German real estate company, Deutsche Wohnen SE, relating to the excessive retention of personal data. Or it could mean separate country or regional schedules.

Privacy 52

Privacy Compliance Personal data Risk 52

Troy Hunt

JULY 17, 2018

I love so many of the underlying principles of GDPR as it relates to protecting our personal data. I love that it seeks to give us more control over access to (and erasure of) our data. Read more: [link] — Have I Been Pwned (@haveibeenpwned) May 24, 2018. 59% were already in @haveibeenpwned.

GDPR 49

GDPR Privacy Communications Data breaches 49

Information is Currency

FEBRUARY 17, 2017

The lead up to it caused me to delay links of the day. Mobile apps give MDM access to personal info. Location data revealed. Risk of personal data loss. The Conflict between Data Science and Cybersecurity. Yesterday I passed two parts of the ICRM exam. Sorry for the delay. Poor User Experience.

MDM 40

MDM Big data Information governance Analytics 40

Reltio

MAY 26, 2020

Here are 5 steps that CPG companies should take in terms of “What” to do and some resources to help them with the “How.”. The What: Personalization – Data and the analysis of it gives CPGs the opportunity to personalize customer experiences more accurately, as well as target consumers with the right advertising.

Customer Experience 52

Customer Experience Retail Sales Digital transformation 52

Data Protection Report

MARCH 7, 2024

China Cuba Iran North Korea Russia Venezuela What is “personally identifiable data” that is “in combination with each other”? The proposed regulation would define the term to mean any “listed identifier” that is linked to any other “listed identifier.” at 17-24) What are the thresholds for “bulk” data?

Access 59

Access Military Compliance Personal data 59

IT Governance

MAY 24, 2024

Expert insight from our cyber incident responder Cyber attacks and data breaches are a matter of when, not if. A determined attacker will always be able to find their way around your defences, given enough time and resources. For example, not so long ago, LockBit [an infamous ransomware gang] got taken down. And at 1:00 am?

Risk 119

Risk Security Ransomware Phishing 119

CILIP

JULY 30, 2019

with the potential for linking UK library resources to 1.5 The report noted that there were examples elsewhere of a brand for public libraries that transcended an individual locality and asked an open question whether ?public The report looks at other visions, for example it says ?trends There was an example that I?ve

Libraries 40

Libraries Digital transformation e-Discovery Marketing 40