Latest Blogs

Latest Blog Posts

GDPR, Part I: History of European Data Protection Law Posted on: October 26, 2017 In: Data Privacy & Cybersecurity
In today’s global marketplace, organizations must comply with an increasingly complicated set of international laws and regulations. This article is the first in a seven-part series which seeks to explain, in plain English, the critical compliance requirements of the European Union’s forthcoming General Data Protection Regulation (GDPR).
Read more »

Tags:
gdpr, european unioin, personal data, eu-u.s. data privacy shield
State of the (State) Data Breach Laws: 2017 Legislative Update, Part III Posted on: October 24, 2017 In: Data Privacy & Cybersecurity
With 2017 nearing its end, the legislative activity in most state capitals has wound down and the majority of legislatures have ended their 2017 sessions. In Part I and Part II of our series, we looked at how a number of states amended or enacted data breach notification-related legislation (Arkansas, Delaware, Maryland, New Mexico, and Tennessee).
Read more »

Tags:
utah, virginia, washington, breach notification, consumer notification, statute, data breach
State of the (State) Data Breach Laws: 2017 Legislative Update, Part II Posted on: October 12, 2017 In: Data Privacy & Cybersecurity
As we noted in Part I of our series, state legislatures across the country continued to refine and reshape their respective data breach notification requirements during the 2017 legislative session. While a handful of states were successful in passing new data breach notification legislation, some of those states significantly revised just when, how, and under what circumstances an entity has to notify affected consumers of a data breach.
Read more »

Tags:
data breach, statute, consumer notification, breach notification, tennessee, new mexico, maryland
State of the (State) Data Breach Laws: 2017 Legislative Update, Part I Posted on: September 26, 2017 In: Data Privacy & Cybersecurity
With the summer winding down and children already heading back to school, most state legislators have already said “sine die” to the 2017 legislative session. And like in legislative sessions over the past few years, data security and data breach notification continued to occupy the legislative calendars of state houses across the country in 2017. During the past session, a myriad of bills affecting breach notification requirements were proposed in numerous state legislatures.
Read more »

Tags:
arkansas, delaware, breach notification, consumer notification, statute, data breach
Executive Management Guide to Cybersecurity: A Conversation with Your IT Team Posted on: August 29, 2017 In: Data Privacy & Cybersecurity
Given the tremendous economic and reputational costs of recent cyber attacks, executives are increasingly attempting to better understand the risk to their information systems. They’ve heard about the impact of data breaches on their peer corporations, and they’ve read about the huge fines levied by federal regulatory agencies. They’ve developed an increased sense of urgency to become better educated.
Read more »

Tags:
critical security controls, cyber threat, it, nist security controls
What You Don’t Know Can Hurt You Posted on: August 24, 2017 In: Data Privacy & Cybersecurity
The need to protect patient information from unauthorized disclosure is nothing new for healthcare providers. However, healthcare providers cannot adequately protect the security and integrity of their patients’ information if they do not first know what threats they face. A string of recent enforcement actions and corresponding high-dollar settlements with the U.S. Department of Health and Human Services Office for Civil Rights (OCR) demonstrates that the agency takes threat identification seriously.
Read more »

Tags:
department of health and human services, office for civil rights, security rule, electronic protected health information, hipaa
Ransomware and Encryption Attacks Posted on: August 15, 2017 In: Data Privacy & Cybersecurity
As organizations move towards the efficiencies of a “paperless office,” the very same internet-facing technologies that help create a more efficient and productive workplace can also greatly increase the risk of suffering a significant ransomware or encryption attack.
Read more »

Tags:
cyber threat, hacking, patching, virus, malware
NY Cyber Regs Compliance Deadline Looms for Financial Firms Posted on: August 10, 2017 In: Data Privacy & Cybersecurity
Protecting sensitive customer and business information from data thieves is nothing new for the financial industry. But come...
Read more »

Tags:
new york, department of financial services, financial firms, incidence response plan, cyber threat
New Mexico’s Data Breach Notification Law: Déjà Vu All Over Again? Posted on: May 22, 2017 In: Data Privacy & Cybersecurity
The Land of Enchantment’s first data breach notification law is set to take effect on June 16, 2017. But how much does it...
Read more »

Tags:
new mexico, breach notification, consumer notification, statute, data breach
Strengthening Federal Cybersecurity Networks Posted on: May 16, 2017 In: Data Privacy & Cybersecurity
On May 11, 2017, President Donald Trump issued an Executive Order entitled “Strengthening the Cybersecurity of Federal...
Read more »

Tags:
nist security controls, executive order, nist framework
Information Security Considerations: Service Provider Agreements Posted on: May 08, 2017 In: Data Privacy & Cybersecurity
A business retains a vendor to perform data processing services. Malicious hackers access a vulnerable port on one of the vendor
Read more »

Tags:
service provider agreement, third party, audit
Law Firm Data Security: Guardians of the Information Galaxy Posted on: May 02, 2017 In: Data Privacy & Cybersecurity
Let's start with what we know: attorneys must protect the information entrusted to them, and yet it may be impossible to prevent
Read more »

Tags:
cyber threat, hacking, malware, spear-phishing, social engineering, ransomware

‹
40
41
42