On May 9, 2024, Governor Wes Moore signed the Maryland Online Data Privacy Act (MODPA) making Maryland the seventeenth state to enact a comprehensive data privacy law. The law takes effect October 1, 2025, but it does not apply to…
Blog Archives
Maryland’s New Approach to Data Minimization Creates Unique Compliance Issues
Tagged with: data collection, data privacy, legislation, privacy, regulations, security practices, sensitive data
Posted in Legislation, Privacy
Posted in Legislation, Privacy
FTC’s Amended Safeguards Rule Imposes Significant Requirements on Covered Entities
On October 27, 2021, the Federal Trade Commission (“FTC”) announced new updates to the Gramm-Leach-Bliley Act (“GLBA”) by amending the Standards for Safeguarding Customer Information, known as the “Safeguards Rule,” and issuing a final rule (the “Final Rule”). The Safeguards…
Tagged with: data security, financial institutions, privacy, safeguards, Safeguards Rule, security practices
Posted in FTC, GLBA, Regulations
Posted in FTC, GLBA, Regulations
5 Ways in Which Your Company’s Privacy Policy is Insufficient
Well thought-out internal privacy policies and procedures are an essential part of any company’s information management program. These internal policies should not be confused with a company’s external privacy notice, which informs the company’s customers as to how it may…
Tagged with: data security, policies and procedures, privacy, regulations, risk management, security practices
Posted in Policies and Procedures, Privacy
Posted in Policies and Procedures, Privacy
Is it Time to Rethink Notice and Choice as a Fair Information Privacy Practice?
Since the 1970’s, fair information practices (FIPs) or fair information privacy practices (FIPPs) have formed the framework around which organizations structure their policies on data collection, use, disclosure, and retention. The cornerstone of individual privacy rights under the FIPs is…
Tagged with: cybersecurity, data security, policies and procedures, privacy, security practices
Posted in Privacy, Standards
Posted in Privacy, Standards
California Passes Internet of Things Law
California continues to pave the way for privacy and cybersecurity legislation as Governor Brown recently signed the first Internet of Things (“IoT”) security law in the United States (SB-327). While connected devices offer users convenience and efficiency, California lawmakers recognized…
Tagged with: cybersecurity, data security, internet of things, iot, legislation, privacy, security practices
Posted in Data Security, Internet of Things
Posted in Data Security, Internet of Things
Updated SEC Guidance Highlights Importance of Solid Cybersecurity Policies and Procedures
The Securities and Exchange Commission (“SEC” or “Commission”) has given public companies a heads up on where the Commission is setting its sights in the ever-developing world of cybersecurity. Here’s what you need to know, and what you need to…
Tagged with: cyber security, cybersecurity, data security, policies and procedures, risk management, SEC, security practices
Posted in Data Security, Privacy, Regulations
Posted in Data Security, Privacy, Regulations
EU’s New Privacy Law—What You Need to Know
The European Union (EU) Parliament’s new data privacy law, known as the General Data Protection Regulation (GDPR), is set to become enforceable in all EU member states on May 25, 2018, just six months from now. The GDPR replaces the…
Tagged with: cybersecurity, data security, GDPR, legislation, privacy, regulations, risk management, security practices
Posted in Data Security, Privacy, Regulations, Standards
Posted in Data Security, Privacy, Regulations, Standards
Equifax Hearings Continue on the Hill
Former Equifax chief Richard Smith returned to Capitol Hill for a second day of congressional hearings into his company’s data breach, this time appearing before the Senate Banking, Housing, and Urban Affairs Committee. Committee Chairman Mike Crapo (R-ID) characterized the…
Tagged with: cybersecurity, data breach, data security, hearings, legislation, privacy, security practices
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Litigation, Privacy
Posted in Cyber crimes, Cyberattack, Data Breach, Data Security, Litigation, Privacy
Protect Against Cyber Attacks: A New Guide to Help Small Businesses
No business is too small to be the victim of a cyberattack. In fact, as larger companies invest more resources in cybersecurity, attackers are beginning to target smaller, less secure businesses. It is important for every small business to understand…
Tagged with: breach, cyber security, cybersecurity, data breach, data security, hacking, policies and procedures, privacy, risk management, safeguards, security practices
Posted in Cyberattack, Data Breach, Data Security, Privacy, Standards
Posted in Cyberattack, Data Breach, Data Security, Privacy, Standards
“Full Employment for CISOs in New York”: New York Proposes the Nation’s First Cybersecurity Regulation
If you’re a CISO living in New York get ready for the phone calls!!! On September 13, 2016, Governor Andrew M. Cuomo proposed the nation’s first cybersecurity regulation. Starting on September 28, 2016 there is a limited 45 day window…
Tagged with: breach, cyber security, cybersecurity, data security, encryption, privacy, regulations, risk assessment, risk management, security practices
Posted in Data Security, Legislation, Regulations
Posted in Data Security, Legislation, Regulations
