Data Matters

SEPTEMBER 4, 2019

The National Association of Insurance Commissioners (NAIC) held its Summer 2019 National Meeting (Summer Meeting) in New York City from August 3 to 6, 2019. The Summer Meeting was highlighted by the following activities. Under Regulation Best Interest (Regulation BI), as adopted by the U.S.

Insurance 68

Insurance Paper Risk Analytics 68

ARMA International

DECEMBER 26, 2019

For 2019, 34% of RIM professionals reported they had restructured their programs, with an additional 31% planning to do so into 2020. Other responses include a center of excellence or dedicated program team (16%) and “multiple, coordinated cross-role committees” (11%). Governance structures for RIM programs remain in flux.

Content services 76

Content services Cloud Records Management Privacy 76

Data Matters

MAY 9, 2019

The National Association of Insurance Commissioners (NAIC) held its Spring 2019 National Meeting (Spring Meeting) in Orlando, Florida, from April 6 to 9, 2019. This post summarizes the highlights from this meeting. reinsurer that is not licensed in the state of domicile of a U.S.

Insurance 68

Insurance Blockchain Big data Risk 68

eSecurity Planet

SEPTEMBER 10, 2021

From the very beginning of the cloud computing era, security has been the biggest concern among enterprises considering the public cloud. In addition, 95 percent of survey respondents confirmed that they are extremely to moderately concerned about public cloud security. What is cloud security?

Cloud 131

Cloud Security Encryption Risk 131

DLA Piper Privacy Matters

JUNE 4, 2020

The Updated Law builds upon the DIFC’s 2007 data protection law ( “Old Data Protection Law” ) and now includes concepts from the EU’s GDPR, as well as other laws from around the world, notably the California Consumer Privacy Act. It also introduces some other concepts that factor in the anticipated uptake of artificial intelligence.

Personal data 52

Personal data GDPR Compliance Privacy 52

Data Matters

AUGUST 6, 2020

On July 2, 2020, Sidley partner Alan Raul, founder and co-head of Sidley’s Privacy and Cybersecurity practice, hosted Adam Klein, Chairman of the Privacy and Civil Liberties Oversight Board (“PCLOB” or “the Board”), for a Monitor-Side Chat. Balancing Counter-Terrorism and Privacy. Balancing Counter-Terrorism and Privacy.

Privacy 68

Privacy Cybersecurity Government Risk 68

ARMA International

AUGUST 5, 2020

I see two big shifts that could impact the way corporations see and leverage information governance (IG): 1) The pandemic has made us more aware of our individual need for privacy and protection, and therefore more responsive to others’ needs. We have faced resistance in the past.

ECM 98

ECM Privacy Communications Government 98

eDiscovery Daily

JANUARY 27, 2020

Meet the new boss, same as the old boss! ; o ) Believe it or not, you can still register here. In the meantime, here are some notable sessions to check out at the show: Tuesday, February 4: 11:30am – 12:30pm: Tech Matters: Managing Legal and Ethical Issues at the Cutting Edge of eDiscovery. and Mary (as in Mary Mack!),

e-Discovery 50

e-Discovery Data Privacy Blockchain Education 50

DLA Piper Privacy Matters

JULY 1, 2019

Why are SCCs and Privacy Shield important? Privacy Shield is a separate scheme which legitimises transfers of data to the US. Privacy Shield allows businesses to lawfully transfer personal data from within the EEA to US businesses who self-certify compliance to certain privacy principles. How has the Schrems 2.0

Privacy 94

Privacy Personal data GDPR Risk 94

Data Matters

APRIL 10, 2020

While the world seems to have ground to a halt in so many ways, time still marches on, and along with it, the California Consumer Privacy Act (“CCPA”) enforcement date (July 1, 2020) inches ever closer. The AG’s revisions make only moderate changes to the last round of regulations issued in February 2020.

Privacy 68

Privacy Sales Insurance Compliance 68

Thales Cloud Protection & Licensing

NOVEMBER 7, 2017

For those who are unfamiliar, the NIST Cybersecurity Framework was created in 2013 as an attempt to standardize practices and give guidance on common, high-level security and privacy risks. In addition, IoT devices rarely follow the principles of security by design. Put simply, trust is critical to the IoT.

IoT 97

IoT Cybersecurity Security Authentication 97

Thales Cloud Protection & Licensing

NOVEMBER 16, 2020

Tue, 11/17/2020 - 06:44. Given this, healthcare organizations need to advance their security efforts to adapt to this shifting environment. and GDPR in the EU dictating strong security controls for safeguarding medical data and sensitive personal patient data. ransomware). COVID-19 accelerates healthcare digitalization.

Digital transformation 62

Digital transformation Encryption Cloud Data breaches 62

Hunton Privacy

JUNE 13, 2023

The new Guidance replaces each agency’s existing guidance regarding risk management practices for third-party relationships, including the FRB’s 2013 guidance, the FDIC’s 2008 guidance, and the OCC’s 2013 guidance and 2020 frequently asked questions.

Risk 64

Risk Insurance Compliance Information Security 64

eSecurity Planet

JANUARY 11, 2022

Information security products , services, and professionals have never been in higher demand, making for a world of opportunities for cybersecurity startups. With evolving attack methodologies due to machine learning, quantum computing, and sophisticated nation-state hackers, security startups are receiving record funding.

Cybersecurity 142

Cybersecurity Cloud Compliance Analytics 142

Data Matters

FEBRUARY 10, 2022

On Monday, January 24, 2022, in a speech at the Northwestern University Pritzker School of Law annual Securities Regulation Institute conference, Gary Gensler, Chair of the U.S. He also signaled the SEC’s continued focus on enforcement and cooperation with other law enforcement agencies.

Cybersecurity 88

Cybersecurity Marketing Risk Compliance 88

DLA Piper Privacy Matters

NOVEMBER 12, 2020

On 11 November, the European Data Protection Board (“ EDPB ”) published recommendations on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data (“ Recommendations ”) as well as recommendations on the European Essential Guarantees for surveillance measures (“ EEGs ”).

Paper 98

Paper Personal data Privacy Access 98

DLA Piper Privacy Matters

JUNE 23, 2021

On 21 June 2021, the European Data Protection Board (“ EDPB ”) published the final Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data (“ Recommendations ”).

GDPR 99

GDPR Personal data Compliance Risk 99

Data Matters

DECEMBER 23, 2020

On December 15, 2020, the U.S. Federal Deposit Insurance Corporation (FDIC) approved and the federal banking agencies jointly announced on December 18 a notice of proposed rulemaking, Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers (NPR).

Security 68

Security Cybersecurity Insurance Communications 68

Data Protection Report

FEBRUARY 27, 2019

With significant enforcement activity and new laws being enacted or proposed since the start of the year, regulators in the EU and the US, several US states, and the US Congress are showing they mean business in terms of data privacy. US Congress’ consideration of a first-ever comprehensive US federal privacy law.

Data Privacy 40

Data Privacy GDPR Privacy Risk 40

Data Protection Report

AUGUST 29, 2019

We are seeing companies use many different approaches to the California Consumer Privacy Act (“CCPA”) compliance, but the “wait and see” approach in particular is not advisable. Does the company currently provide privacy notices before collecting personal information? See our previous posts, linked below.). What will they do with it?

Privacy 40

Privacy Compliance Risk GDPR 40

IT Governance

MARCH 13, 2020

Last updated March 2020. In this context, a contract doesn’t have to be a formal legal document, as long as it meets the requirements of contract law. This lawful basis will not apply if there are other ways of meeting those obligations. First published June 2018. But what is a lawful basis for processing? Legal obligations.

GDPR 92

GDPR Personal data Compliance Marketing 92

Thales Cloud Protection & Licensing

NOVEMBER 18, 2020

Thu, 11/19/2020 - 06:33. The new normal of remote working brought on by the pandemic has demonstrated the clear need for organizations to be able to deliver secure access to both cloud and on-premises enterprise applications for their remote workforces. billion by 2021 according to its last Information Security forecast report.

Authentication 62

Authentication Access B2C Cloud 62

eSecurity Planet

AUGUST 13, 2021

As the demand for robust security defense grows by the day, the market for cybersecurity technology has exploded, as well as the number of available solutions. Syxsense Secure. Stop breaches with one endpoint security solution. Pre-built templates keep organizations secure without needing large teams and specialists.

Cybersecurity 145

Cybersecurity Cloud Encryption Marketing 145

Hunton Privacy

DECEMBER 17, 2020

On December 15, 2020, the Irish Data Protection Commission (“DPC”) announced its fine of €450,000 against Twitter International Company (“Twitter”), following its investigation into a breach resulting from a bug in Twitter’s design. The bug was discovered on December 26, 2018. Investigation and GDPR Dispute Resolution Procedure.

GDPR 72

GDPR Data breaches Personal data Compliance 72

DLA Piper Privacy Matters

MARCH 19, 2020

On March 11, 2020, the California Attorney General’s Office issued a third version of its draft CCPA rules (Version 3.0), only two weeks and a day after receiving comments on the second version. Privacy policies (§ 999.308). By Jim Halpert and Katie Lee. Comments are due March 27 at 5 p.m. Most of the changes in Version 3.0

Sales 52

Sales Compliance Privacy Analytics 52

Troy Hunt

MARCH 2, 2020

After 11 months of a very intensive process culminating in many months of exclusivity with a party I believed would ultimately be the purchaser of the service, unexpected changes to their business model made the deal infeasible. It all felt a bit, well. It was surreal.

IT 135

IT Mining Sales Data breaches 135

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 68

Financial Services Cybersecurity Insurance Risk 68

Data Protection Report

JULY 16, 2019

In a 12-hour marathon hearing, the California Senate Judiciary Committee on July 9, 2019, debated, struck down, scaled back and put back on the negotiating table key amendments to the California Consumer Privacy Act (“CCPA”). At a minimum, businesses should review and amend their employee privacy policy and notice to meet CCPA’s requirements.

Privacy 40

Privacy B2B Data breaches Data collection 40

Data Matters

APRIL 20, 2020

Case: WM Morrison Supermarkets plc v Various Claimants [2020] UKSC 12. This is particularly important as enforcement actions and significant fines by European supervisory authorities under the GDPR, as well as moves to bring mass privacy claims, are increasing. 1 [2016] UKSC 11. 1 [2016] UKSC 11. 2 [2002] UKHL 48.

Data breaches 68

Data breaches GDPR Privacy IT 68

DLA Piper Privacy Matters

NOVEMBER 24, 2020

million Euro fine issued by the German Federal Commissioner for Data Protection and Freedom of Information ( Bundesbeauftragter für den Datenschutz und die Informationsfreiheit – ‘BfDI’) in connection with an alleged infringement of the security of processing under Article 32 (1) GDPR ( not Article 5 (1) (f) GDPR). Conclusion.

GDPR 75

GDPR Authentication Compliance Personal data 75

eDiscovery Daily

OCTOBER 20, 2019

Here are some of the eDiscovery-related sessions for today: 11:00 AM – 12:00 PM: The Business of Law 2020: The FTI-Relativity General Counsel Survey. What does the future hold for law and business in 2020 and beyond? 3:55 PM – 4:55 PM: CFIUS: A Guide to Navigating National Security Requirements in the Data Economy.

e-Discovery 40

e-Discovery Data Privacy Education Privacy 40

Data Matters

MARCH 23, 2020

On March 5, 2020, the Office of the Comptroller of the Currency (OCC) issued an updated set of answers to frequently asked questions (FAQs) 1 regarding risk management in national bank relationships with third parties to further supplement its 2013 guidance, OCC Bulletin 2013-29 (the Bulletin), 2 and its 2017 FAQs (Prior FAQs) on the topic.

Risk 68

Risk Cloud Compliance Marketing 68

IT Governance

DECEMBER 27, 2019

IT Governance is closing out the year by rounding up 2019’s biggest information security stories. Countless office workers were forced to get back to their jobs after Reddit suspended a host of accounts in light of security concerns. Facebook said that the breach was discovered in January 2019 as part of an internal security review.

Data breaches 69

Data breaches GDPR Passwords Personal data 69

eDiscovery Daily

JANUARY 31, 2018

Sessions in the main conference tracks include: 11:00 AM – 12:00 PM: George Orwell’s The Animal Farm and Prepping for Disaster. Equifax hacks and security breaches. Pallab Chakraborty , Cyber Security & Privacy Counsel, AI & Legal Technology Thought Leader; Hanley Chew , Partner, Fenwick & West LLP; Bert G.

Information governance 37

Information governance Cloud IoT Risk 37

HL Chronicle of Data Protection

MAY 13, 2019

Of particular concern to state-level policymakers and enforcement authorities are business practices that in their view may contribute to security incidents. Major data breaches in recent years are spurring state legislators and regulators across the US into action. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40