Latest Blogs

Latest Blog Posts

Social Media and the Workplace – Why and How Employers Should Limit the Use of Social Media in the Workplace Posted on: November 09, 2018 In: Data Privacy & Cybersecurity
Social media has revolutionized the way people communicate and stay in contact with one another. But in the workplace, trying to “friend” an employee or sharing a photo with sensitive information in the background can create legal liabilities that employers may not have thought about before.
Read more »

Tags:
social media, employment, workplace policy, hipaa
New Canadian Data Breach Notification Requirements Take Effect as PIPEDA Amendments Come Into Force Posted on: October 31, 2018 In: Data Privacy & Cybersecurity
On November 1, 2018, the long-awaited amendments to Canada’s main federal data privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), take effect.
Read more »

Tags:
canada, breach notification, statute, pipeda, consumer notification, data breach
American Bar Association Issues Data Breach Guidance Posted on: October 23, 2018 In: Data Privacy & Cybersecurity
On October 17, 2018, the American Bar Association (ABA) released Formal Opinion 483 (the Opinion) which formally recognized that lawyers have an ethical duty to notify clients whose confidential information is compromised by a data breach.
Read more »

Tags:
data breach, american bar association, aba, ethics, client notification
Social Engineering Targets: Email Compromises - A Quick Prevention Guide Posted on: October 15, 2018 In: Data Privacy & Cybersecurity
More than ever before, malicious actors are targeting email platforms in an attempt to access and monetize sensitive personal information. They often gain access to email accounts through the use of social engineering – inducing unsuspecting account owners to open email attachments that contain malicious computer code (malware).
Read more »

Tags:
social engineering, malware, email, multi-factor identification, dmarc, microsoft office 365
California Legislature Passes Benefit Reimbursement Law for Data Breach Victims Posted on: September 10, 2018 In: Data Privacy & Cybersecurity
The California legislature, in recognizing the vulnerability of state information systems to exploitation by malicious actors, recently passed legislation allowing state benefits to be reimbursed to affected persons if benefits are stolen through a data breach.
Read more »

Tags:
california, electronic benefit transfer, ebt, data breach
Equifax Agrees to New Data Security Measures in Consent Order with Eight State Regulatory Agencies Posted on: July 25, 2018 In: Data Privacy & Cybersecurity
On September 7, 2017, the consumer reporting agency Equifax announced one of the most highly publicized cybersecurity incidents in history, which may have exposed more than 143 million Americans’ personally identifiable information (PII). Equifax claimed that malicious actors gained unauthorized access to certain files containing consumers’ PII, including Social Security numbers and payment card information, between May and July of 2017.
Read more »

Tags:
equifax, consent order, federal trade commission, data breach
European Parliament Votes to Suspend the EU-U.S. Privacy Shield Posted on: July 10, 2018 In: Data Privacy & Cybersecurity
On July 5, 2018, the European Parliament voted to suspend the EU-U.S. Privacy Shield Framework (Privacy Shield), an agreement between the United States and the European Union regarding the obligations of U.S.-based companies to protect Europeans’ personal data.
Read more »

Tags:
european union, eu, european parliament, eu-u.s. privacy shield, gdpr
California Enacts Sweeping, EU-Style Privacy Law Posted on: July 06, 2018 In: Data Privacy & Cybersecurity
On June 28, 2018, California Governor Jerry Brown signed A.B. 375 into law, a robust bill that provides substantially broader privacy rights to California consumers regarding how certain businesses can collect, use, sell, and disclose their personal information. The new law requires such businesses to be more transparent in their data collection and sharing practices.
Read more »

Tags:
california, ccpa, gdpr, privacy act, personal data, european union
Colorado Amends Data Breach Notification Statute Posted on: June 18, 2018 In: Data Privacy & Cybersecurity
On May 29, 2018, Colorado Governor John Hickenlooper signed House Bill (“HB”) 1128 into law, amending the State’s data breach notification statute and imposing significant new requirements on entities that must notify Colorado residents of a data incident pursuant to Colo. Rev. Stat. § 6-1-716.
Read more »

Tags:
colorado, data breach, breach notification, statute, consumer notification, legislative alert
Benefits of A Security Posture Assessment Posted on: May 07, 2018 In: Data Privacy & Cybersecurity
The most difficult step to take in tackling the digital security goals of an organization is often the first one. Before responding to an audit, before scheduling a penetration test, before implementing a new privacy policy or formulating an incident response plan, the most important thing a company can do right from the start about security is to have a conversation.
Read more »

Tags:
security posture assessment, nist security controls, security vulnerabilities, audit, pre-breach services
GDPR, Part VII: A Brief Guide to the GDPR Posted on: May 02, 2018 In: Data Privacy & Cybersecurity
On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) will take effect. The primary objectives of the GDPR are to return control of “personal data” to EU citizens and residents and to simplify the regulatory environment for international business by unifying regulations within the EU.
Read more »

Tags:
gdpr, european union, data privacy officer, personal data, breach notification
Protecting Against Ransomware Attacks: Security and Best Practices Tips Posted on: April 11, 2018 In: Data Privacy & Cybersecurity
Encryption attacks, more commonly known as ransomware, are one of the major cyber threats facing businesses today. No company is immune from threat of attack—any business that is connected to the internet is at risk. Industry experts estimate that a business falls victim to a ransomware event every 40 seconds.
Read more »

Tags:
ransomware, cyber threat, remote desktop protocol, rdp, multi-factor identification, phishing, data security

‹
38
39
40
41
42
›