Well thought-out internal privacy policies and procedures are an essential part of any company’s information management program. These internal policies should not be confused with a company’s external privacy notice, which informs the company’s customers as to how it may…
Blog Archives
5 Ways in Which Your Company’s Privacy Policy is Insufficient
Tagged with: data security, policies and procedures, privacy, regulations, risk management, security practices
Posted in Policies and Procedures, Privacy
Posted in Policies and Procedures, Privacy
Is it Time to Rethink Notice and Choice as a Fair Information Privacy Practice?
Since the 1970’s, fair information practices (FIPs) or fair information privacy practices (FIPPs) have formed the framework around which organizations structure their policies on data collection, use, disclosure, and retention. The cornerstone of individual privacy rights under the FIPs is…
Tagged with: cybersecurity, data security, policies and procedures, privacy, security practices
Posted in Privacy, Standards
Posted in Privacy, Standards
Senators Introduce Data Care Act to Establish Duties for Online Service Providers
On December 12, 2018, Senator Schatz (D-HI), along with 15 other Senators, introduced the Data Care Act of 2018 “to establish duties for online service providers with respect to end user data that such providers collect and use.” The bill…
Tagged with: cyber security, data security, FTC, GDPR, hearings, legislation, policies and procedures, privacy, regulations
Posted in FTC, Legislation, Privacy, Standards
Posted in FTC, Legislation, Privacy, Standards
Updated SEC Guidance Highlights Importance of Solid Cybersecurity Policies and Procedures
The Securities and Exchange Commission (“SEC” or “Commission”) has given public companies a heads up on where the Commission is setting its sights in the ever-developing world of cybersecurity. Here’s what you need to know, and what you need to…
Tagged with: cyber security, cybersecurity, data security, policies and procedures, risk management, SEC, security practices
Posted in Data Security, Privacy, Regulations
Posted in Data Security, Privacy, Regulations
Cybersecurity Best Practices — How General Counsel Can Prepare For The Worst
Take note GCs: The question is not if you will have to respond to a cybersecurity incident—the question is when. That was the message from speakers and panelists at the Association of Corporate Counsel’s annual meeting this year. Indeed, the…
Tagged with: cyber security, cybersecurity, data breach, data security, policies and procedures, risk analysis, risk assessment, risk management
Posted in Data Breach, Data Security
Posted in Data Breach, Data Security
Protect Against Cyber Attacks: A New Guide to Help Small Businesses
No business is too small to be the victim of a cyberattack. In fact, as larger companies invest more resources in cybersecurity, attackers are beginning to target smaller, less secure businesses. It is important for every small business to understand…
Tagged with: breach, cyber security, cybersecurity, data breach, data security, hacking, policies and procedures, privacy, risk management, safeguards, security practices
Posted in Cyberattack, Data Breach, Data Security, Privacy, Standards
Posted in Cyberattack, Data Breach, Data Security, Privacy, Standards
OCR Announces Two Significant HIPAA Breach Settlements
On consecutive days, the Office of Civil Rights (“OCR”) of the Department of Health and Human Services (“HHS”) recently announced two large HIPAA breach settlements. On March 16, 2016, OCR announced that it entered into a Resolution Agreement with North…
Tagged with: breach, business associate, business associate agreement, corrective action plan, covered entity, encryption, HHS, HIPAA, laptop, OCR, PHI, policies and procedures, resolution agreement, risk analysis, risk assessment, settlement, unencrypted
Posted in Data Breach, Data Security, HIPAA
Posted in Data Breach, Data Security, HIPAA
