IT Governance

OCTOBER 13, 2023

Keeping informed about current attacks is one of the best ways of reducing the risk of falling victim. So, as ever, this blog series examines recent phishing campaigns and the tactics criminals use to trick people into compromising their data. Can you spot a phishing scam?

Phishing 105

Phishing Financial Services Manufacturing Personal data 105

Thales Cloud Protection & Licensing

JANUARY 10, 2024

That decision of adequacy provides in substance that there is an adequate level of protection—comparable to that in the EU—for personal data transferred from the EU to US companies that are participating in the DPF. However, European organizations need to dive with eyes wide open when transferring personal data to the US under the DPF.

Data Privacy 83

Data Privacy Personal data Privacy Cloud 83

Hunton Privacy

OCTOBER 24, 2022

On October 18, 2022, the New York State Department of Financial Services (“NYDFS”) announced that EyeMed Vision Care LLC (“EyeMed”) agreed to a $4.5 As part of the settlement, EyeMed agreed to conduct a comprehensive cybersecurity risk assessment and prepare an action plan that addresses the risks identified in that assessment.

Cybersecurity 67

Cybersecurity Financial Services Risk Phishing 67

Data Matters

JANUARY 28, 2022

Other government agencies, like the New York Department of Financial Services and the Federal Trade Commission, are also increasingly focused on the need for broad implementation of MFA. MFA was also expressly named by both Microsoft and Mandiant as one of the most important recommendations to mitigate risk.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Data Protection Report

OCTOBER 24, 2022

On October 18, 2022, the New York Department of Financial Services announced a settlement with EyeMed, a licensed life, accident, and health insurer, with respect to a security incident that occurred in 2020. NYDFS found that none of the assessments addressed the risks associated with the compromised O365 mailbox.

Cybersecurity 52

Cybersecurity Personal data Risk Financial Services 52

Data Protection Report

DECEMBER 23, 2019

The most significant action came in October, when the Berlin Commissioner for Data Protection and Freedom of Information issued a €14.5million fine against German real estate company, Deutsche Wohnen SE, relating to the excessive retention of personal data. How should businesses change their attitudes towards data retention?

Privacy 144

Privacy Compliance Personal data Risk 144

ARMA International

APRIL 18, 2022

Introduction to Data Protection Laws. Data protection laws, regulations, and rules control the collection, use, transfer, and storage of personal and sensitive information. Personal data protection requirements may be issued by federal, state (provincial), or local governments.

Personal data 100

Personal data GDPR Privacy Records Management 100

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Security 83

Security Data breaches Ransomware Artificial Intelligence 83

Data Matters

JUNE 24, 2021

The SEC is considering enhancing its disclosure rules concerning cybersecurity risk governance and has indicated a target release date of October 2021. enable companies to identify cybersecurity risks and incidents. evaluate the significance associated with such risks and incidents.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

Collibra

AUGUST 14, 2023

Our framework is informed by our definition of AI governance: AI governance is the application of rules, processes and responsibilities to drive maximum value from your automated data products by ensuring applicable, streamlined and ethical AI practices that mitigate risk, adhere to legal requirements and protect privacy.

Government 52

Government Risk Financial Services Compliance 52

Data Protection Report

SEPTEMBER 28, 2021

Suggested activities include monitoring, detecting or correcting bias in AI systems; using personal data for internal R&D or “business innovation purposes aimed at improving services to customers”; and using audience measurement cookies to improve webpages. Complaints and DSARs.

Government 120

Government FOIA GDPR Compliance 120

Data Protection Report

JANUARY 6, 2020

In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. As a result, organisations need to revisit their current cookie consent mechanisms and notices and reassess their appetite to risk.

Privacy 85

Privacy GDPR Data breaches Risk 85

Data Protection Report

FEBRUARY 8, 2022

EyeMed engaged a forensic investigator, which was unable to determine whether any exfiltration of personal data had occurred, due in part to a lack of log data. Although organizations should consider the optics of partial implementation, companies should not forgo the risk mitigation of incremental improvements. (2)

Passwords 98

Passwords Financial Services Authentication Insurance 98

eSecurity Planet

AUGUST 9, 2022

The GDPR provision that may keep IT security teams busiest is Article 32, which requires “a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing” of personal data. GDPR-style data privacy laws came to the U.S.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

Data Protection Report

DECEMBER 23, 2019

The most significant action came in October, when the Berlin Commissioner for Data Protection and Freedom of Information issued a €14.5million fine against German real estate company, Deutsche Wohnen SE, relating to the excessive retention of personal data. How should businesses change their attitudes towards data retention?

Privacy 52

Privacy Compliance Personal data Risk 52

IT Governance

NOVEMBER 9, 2018

So, you are carrying out profiling if you collect and analyse personal data using algorithms or AI, make associations between habits and characteristics based on that data, and predict individuals’ behaviour based on the demographic or profile that you’ve assigned them. What is profiling under the GDPR?

GDPR 88

GDPR Personal data Financial Services Compliance 88

Security Affairs

MARCH 18, 2019

Using Slack EKM, IT admins can revoke access to data within a particular Slack channel, for example, rather than disrupting all users on the entire platform. They can share chats, files and other data , all while still meeting their own risk mitigation requirements. What are the security risks of Slack? Admin Roles.

Encryption 75

Encryption Risk Financial Services Privacy 75

HL Chronicle of Data Protection

MARCH 16, 2020

On Tuesday, 3 March 2020, we welcomed our financial services clients in London to a lively panel event, which covered the multitude of issues which arise in a cybersecurity incident. Peter Marta. Arwen Handley. Philip Parish. Nicola Fulford. This ensures consistent messaging to all relevant parties.

Cybersecurity 59

Cybersecurity Financial Services Risk Insurance 59

HL Chronicle of Data Protection

JULY 9, 2019

The ICO intends to use its own Sandbox to support organisations that are looking to use personal data in innovative ways through the use of new technologies and approaches. In the UK financial services industry, the Financial Conduct Authority (FCA) introduced a regulatory sandbox in 2015.

GDPR 40

GDPR Personal data Privacy Financial Services 40

DLA Piper Privacy Matters

OCTOBER 16, 2019

Multinationals increasingly turning to BCRs as providing more legal certainty for personal data transfers from the EU. The EU General Data Protection Regulation (“GDPR”) brought about stricter data protection rules, and increased penalties for breaching these rules. What are BCRs? Following market leaders.

GDPR 40

GDPR Personal data Marketing Healthcare 40

Data Protection Report

JANUARY 6, 2020

In the UK, the Information Commissioner’s Office (ICO) has been very outspoken on the ad tech industry’s use of special category personal data and onwards data sharing without explicit consent. As a result, organisations need to revisit their current cookie consent mechanisms and notices and reassess their appetite to risk.

Privacy 52

Privacy GDPR Data breaches Risk 52

DLA Piper Privacy Matters

AUGUST 23, 2021

Instead the PIPL is a robust data privacy framework designed to safeguard individuals’ personal data against abuse, but at the same time to reflect cultural and business attitudes to data in China, as well as new technologies (including advances in AI, biometrics and data analytics), and to enable flows of personal data.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

DLA Piper Privacy Matters

SEPTEMBER 29, 2017

Pursuant to several provisions of the French Code Monétaire et Financier , entities from the banking and financial sector are required to implement processes and strategies to detect, measure and manage operational risks within their group (on a consolidated basis).

Personal data 40

Personal data Financial Services Risk Insurance 40

Thales Cloud Protection & Licensing

NOVEMBER 16, 2017

Ahead of the May 2018 legislation, we’ve been asking organisations if they’re #FITforGDPR – whether they’re ready to improve their personal data protections, as well as take on the increased accountability for data breaches, should they occur. As expected, responses have been mixed. A role of responsibility.

GDPR 63

GDPR Retail Data breaches Financial Services 63

Data Protection Report

OCTOBER 1, 2019

Law § 899-aa) differs from most states’ law in several ways including (1) using separate definitions of “personal information” and “private information;” and (2) providing factors to consider whether personal information had been acquired. 6) Adjusts the security program in light of business changes or new circumstances.

Security 40

Security Financial Services Passwords Risk 40

CGI

JANUARY 12, 2017

Consumers lack trust in the companies that provide these services (largely FinTechs) due to their newness in the market and divergence away from traditional banking. In addition, consumers have trust issues when it comes to providing the personal data these services require. Finally, many consumers are simply risk averse.

Financial Services 40

Financial Services IoT Risk Insurance 40

HL Chronicle of Data Protection

NOVEMBER 15, 2018

This news should unquestionably be welcomed by international businesses that are looking for both certainty and consistency in the measures they have to take to protect personal data. What constitutes personal data that is subject to the withdrawal agreement is currently unclear. Transition period.

GDPR 40

GDPR Personal data Government Financial Services 40

CGI

OCTOBER 25, 2015

Despite increasing regulations across the finance sector globally, fraud and associated risks continue to increase—and at a staggering pace. Thomson Reuters was recently quoted as saying, “Increased regulation isn’t just a temporary challenge for global financial institutions—it’s the new reality.”. Finance service providers.

IT 40

IT Security Digital transformation Compliance 40

Hunton Privacy

NOVEMBER 10, 2016

The impetuses for the survey were the many significant changes the GDPR will bring to companies’ management and processing of personal data, their privacy compliance programs and their IT systems and infrastructure. The GDPR replaces Directive 95/46/EC and will become applicable in May 2018.

GDPR 45

GDPR Data Privacy Compliance Privacy 45

eSecurity Planet

JUNE 16, 2022

This represents the greatest transfer of economic wealth in history, risks the incentives for innovation and investment, is exponentially larger than the damage inflicted from natural disasters in a year, and will be more profitable than the global trade of all major illegal drugs combined,” the report warned. Crimeware and spyware.

Ransomware 145

Ransomware Cybersecurity Phishing Encryption 145

HL Chronicle of Data Protection

MAY 13, 2019

For example, the New York Department of Financial Services (‘NYDFS’) in March 2017 issued its Cybersecurity Regulation (23 NYCRR 500) (‘the NYDFS Cybersecurity Regulation’), a groundbreaking and far-reaching regulatory regime focused on financial institutions licensed in New York, including insurance companies.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Hunton Privacy

JULY 22, 2009

The UK Financial Services Authority (FSA) has announced today fines for three HSBC entities totaling £3 million for failing to have adequate systems and controls in place to protect their customers’ confidential data. The fine is the highest to date in the UK and reflects a 30% discount for cooperating with the FSA.

Security 40

Security Insurance Data breaches Personal data 40

Data Protection Report

MARCH 7, 2024

Recall that the focus of the Executive Order was not on single transactions, but rather bulk transactions of Americans’ personal data. The regulation also proposes this chart with respect to risk levels and bulk thresholds: (at 25). What is included in the special category of “government related data”?

Access 59

Access Military Compliance Personal data 59

Collibra

OCTOBER 31, 2023

With every financial services organization focused on making better and faster decisions, data professional and business leaders are eager to better understand how AI can facilitate their strategic goals. Mitigating Risk in AI So, what happens when AI gets out of control and good intentions lead to bad results.

Marketing 87

Marketing Government Financial Services Artificial Intelligence 87

Data Matters

JANUARY 2, 2018

The May 25, 2018 effective date for the EU’s General Data Protection Regulation (GDPR) will no doubt be a central focus of 2018. Europe’s omnibus new framework for data protection law applies to (almost) all entities that collect and process EU personal data regardless of where the data are processed.

Cybersecurity 68

Cybersecurity Privacy Data breaches GDPR 68

ARMA International

AUGUST 2, 2019

with Equifax in connection with a 2017 data breach that exposed sensitive, personal data of around 147 million people. See Department Justice press release, Seattle Tech Worker Arrested for Data Theft Involving Large Financial Services Company , July 29, 2019.) Thompson in connection with the incident.

Cloud 41

Cloud Data breaches Encryption Access 41

DLA Piper Privacy Matters

JULY 22, 2021

The rights around DSARs are set out in the GDPR and Recital 63 makes it clear that it is the intention that “a data subject should have the right of access to personal data… in order to be aware of, and verify, the lawfulness of the processing”. Approach of the Irish Data Protection Commission. Dealing with the DSAR.

Access 119

Access Personal data GDPR Financial Services 119