Remove tag consumer-protection
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. As indicated in the paragraph quoted above, the company collected some very sensitive personal information.

article thumbnail

California Consumer Privacy Act: GDPR-like definition of personal information

Data Protection Report

This is the Data Protection Report’s third blog in a series of blogs that will break down the major elements of the CCPA which will culminate in a webinar on the CCPA in October. This blog focuses on the CCPA’s broad definition of Personal Information.

GDPR 40
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Guest Post -- GDPR Compliance starts with Data Discovery

AIIM

This is the seventh post in a series on privacy by Andrew Pery. You might also be interested in: Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. Privacy by Design: The Intersection of Law and Technology. What Do the GDPR and new Privacy Laws Mean for U.S.

GDPR 102
article thumbnail

Data management sets the next phase of zero-trust

Collibra

What’s to come The federal zero-trust strategy reflects the federal government’s goal of a comprehensive zero-trust approach to data management as the CDOs in the federal agencies are called on to implement this strategy and work with the security team and other stakeholders. They are consumed once created.

article thumbnail

EU Commission Issues Recommendation on RFID, Privacy and Data Protection

Hunton Privacy

On May 12, 2009, the European Commission issued a long-awaited recommendation on the implementation of privacy and data protection principles in applications supported by radio-frequency identification (“RFID”). Companies and public authorities should develop a framework for privacy and data protection impact assessments.

Privacy 40
article thumbnail

IoT Cybersecurity: 5 Major Vulnerabilities and How to Tackle Them

Security Affairs

Furthermore, consumers believe that companies and services have the responsibility of keeping their data secure. Both companies and consumers need to work proactively to protect their integrity. To put in simple terms, it refers to the process of providing a web application with JavaScript tags on input.

IoT 129
article thumbnail

Historic Charges: First Enforcement Action Filed by New York Department of Financial Services Under Cybersecurity Regulation

Data Matters

The Regulation requires that Covered Entities establish and maintain a cybersecurity program designed to protect the confidentiality, integrity, and availability of its information systems and its customers’ NPI as defined in 23 NYCRR §§ 500.01(e) e) and 500.01(g), g), respectively.