837 articles · showing 781–837 of 14 pages
covers case studies of businesses with successful compliance programs, discussing strategies and lessons learned. It highlights companies' approaches to transparency, data management, and navigating r...
covers data privacy's importance, risks of breaches, and protective laws. It discusses financial and reputational consequences of breaches and the role of laws in safeguarding consumer data. Businesse...
Chief Compliance Officers and Data Protection Officers can use this guide to navigate global privacy regulations. It covers key laws like GDPR and CCPA, and provides steps for compliance. The guide is...
covers US state information security and privacy acts, including laws in California, Colorado, and Virginia. It provides an overview of state-specific regulations to protect citizens' data. Businesses...
The SEC's cybersecurity disclosure rules require publicly traded companies to report material incidents within four business days. Companies are using Form 8-K to disclose incidents, with 54 companies...
The AI Security Center's joint guidance documents cover AI security best practices and evaluation methodologies. They address data poisoning and supply-chain integrity for training data. Compliance an...
covers the ALPHV ransomware group's attacks on McLaren Healthcare and Change Healthcare, including the breach details and regulatory aftermath. It discusses the largest healthcare data breach in US hi...
covers India's rising cybercrime threat, with 80% of incidents from ten vulnerable districts. It explores emerging threats and contributing factors, including deepfake technology. India's cybersecurit...
Healthcare data breaches surged in August 2023, exposing 11 million individuals' records. The article covers breach statistics and enforcement actions. It discusses vulnerabilities and ransomware atta...
The FDA's medical device cybersecurity framework has updated requirements for manufacturers, including a Coordinated Vulnerability Disclosure policy and Software Bill of Materials. Hospital CISOs must...
The MGM Grand data breach raises questions about cybersecurity and regulatory requirements. It covers compliance issues and SEC rules for public companies. Chief Compliance Officers and organizations ...
Compliance teams and regulators cover AI's role in compliance management, including new obligations and frameworks. The EU AI Act and NIST AI RMF set standards for AI governance. Internal audit depart...
Compliance trends for 2024 are reevaluated in light of actual developments. AI and data privacy expansion were correct predictions, while ESG regulation and global regulatory harmonization went in opp...
covers insider threats, including malicious and negligent insiders, and their financial and compliance consequences. It cites the 2026 Ponemon Cost of Insider Risks Global Report, which found average ...
Compliance teams and employers should read this to understand new regulations and obligations for remote and gig work. The EU's Platform Work Directive and US state laws impose requirements on worker ...
Data localization laws require certain data to be stored and processed within a country's borders. Businesses operating across multiple jurisdictions must navigate these laws. Compliance teams and com...
covers recent developments in biometric data privacy law, including changes to Illinois's BIPA and new statutes in Texas and the EU. It discusses compliance challenges and obligations for organization...
The impact of quantum computing on data privacy is discussed, covering updated standards and deadlines. NIST finalized post-quantum cryptography standards and set migration deadlines. Organizations sh...
Mergers and acquisitions involve complex compliance work. Compliance teams should review regulatory history, contractual obligations, and security posture. This information is relevant to compliance a...
NYDFS regulates financial services in New York, focusing on information security. Its cybersecurity regulations require companies to have programs and policies in place to protect consumer data. Finan...
Healthcare compliance officers face updated HIPAA Security Rules and increased enforcement. The proposed rules mandate encryption and multi-factor authentication. Compliance teams should prepare for n...
The Cybersecurity Vulnerability Remediation Act aimed to amend the Homeland Security Act. It would have allowed CISA's director to issue protocols for mitigating vulnerabilities. Federal agencies and ...
Financial institutions face updated compliance challenges due to changes in FFIEC guidance, New York's cybersecurity regime, and federal cryptocurrency laws. The FFIEC retired its Cybersecurity Assess...
Compliance audits test if an organization follows its policies. Recent framework changes require preparation against specific criteria. Organizations should confirm the audit version and scope to prep...
NCUA's cyber incident reporting rule requires federally insured credit unions to notify the agency within 72 hours of a reportable incident. The rule aims to provide early warnings, not fully investig...
NCUA regulations govern federal credit unions, covering areas like lending and investments. Credit union professionals and lawyers should review these rules. The NCUA updates regulations to address em...
covers HIPAA compliance, including key rules and requirements. It applies to healthcare providers and organizations handling protected health information. Healthcare professionals should read it to un...
Compliance training covers changes in regulatory expectations and best practices. It discusses the US Department of Justice's updated evaluation criteria and the importance of role-specific training. ...
Businesses can learn best practices for building a strong compliance program, including risk assessment and training. The article covers elements like policies and procedures, and monitoring. It discu...
The intersection of compliance and cybersecurity is discussed, highlighting how compliance enhances an organization's cybersecurity posture. Compliance standards and regulations, such as GDPR and HIPA...
covers cross-border data transfers and compliance with ASEAN Model Contractual Clauses and EU Standard Contractual Clauses. It provides a comprehensive guide for international businesses operating in ...
The Computer Fraud and Abuse Act (CFAA) remains the primary federal anti-hacking statute in the US. Recent court decisions and policy changes have narrowed its application, particularly regarding "exc...
The increasing prevalence of data breaches has led to a surge in state-level information security privacy acts across the United States. These laws aim to hold organizations accountable for protecting...
Compliance and ethics in business are closely related but distinct concepts. Compliance refers to adhering to rules and regulations, while ethics involves making decisions based on moral values. Organ...
The Texas Data Privacy and Security Act covers data privacy laws in Texas, applying to entities that conduct business or process personal data in the state. It grants consumers rights such as data acc...
Compliance regulations emphasize the importance of security assessments in safeguarding sensitive data and avoiding potential breaches. These assessments allow organizations to evaluate their system's...
FERPA protects student education record privacy in US schools. It grants rights to parents and students, including inspecting records and controlling information disclosure. Educational institutions a...
The California Consumer Privacy Act (CCPA) gives residents rights to know, delete, and opt out of personal information sales. Businesses must comply with new regulations, including cybersecurity audit...
COPPA regulates online services directed to children under 13. It imposes requirements on operators collecting personal info from minors. Organizations handling children's data should understand COPPA...
covers emerging trends in data privacy, including AI, blockchain, and regulatory enforcement. It discusses compliance implications and new requirements, such as privacy by design and Data Protection O...
covers compliance with privacy laws for cross-border data transfers, including understanding legal landscapes and implementing data transfer mechanisms. It discusses data mapping, Data Protection Impa...
This post updates a 2023 comparison of major data privacy laws, including GDPR, PIPEDA, and LGPD. It covers changes since 2023, such as India's new Digital Personal Data Protection Act and the Swiss-U...
The GDPR is a comprehensive EU data protection law applying to organizations worldwide that collect or process EU citizens' personal data. It covers requirements, compliance, and impact on businesses....
Chief Compliance Officers can learn about updated data breach response frameworks and compliance requirements. The guide covers recent incidents and changing breach trends. It is relevant for CCOs in ...
The piece covers real-life cases of non-compliance with data protection laws, including fines imposed on companies like Didi Global and Amazon. It highlights penalties and reputational damage resultin...
The Digital Personal Data Protection Act and its implementing Rules cover India's data protection legislation. Businesses and organizations should read it to understand compliance requirements. The Ac...
The role of a Data Protection Officer (DPO) in compliance is crucial, involving monitoring, advising, and liaison with regulators. Organizations required to appoint a DPO include those with core activ...
The General Data Protection Regulation (GDPR) applies to organizations processing EU or EEA individuals' personal data. It imposes fines up to 4% of global annual turnover and has issued over €7 billi...
PIPEDA governs how private sector organizations in Canada handle personal information. It outlines ten fair information principles for data protection. Organizations processing personal information in...
POPIA covers South Africa's data privacy framework, applying to entities processing personal information in the country. It defines personal information broadly and requires responsible parties to ens...
The Act on the Protection of Personal Information (APPI) is Japan's primary data privacy legislation. It applies to private sector organizations handling personal data. Businesses and data protection ...
The Personal Data Protection Act covers Singapore's framework for data privacy, governing collection, use, and disclosure of personal data. It establishes a robust framework balancing individual right...
The Australian Privacy Principles cover personal information handling, access, and security. They apply to government agencies, private sector organizations, and health service providers. Entities mus...
The Swiss-US Data Privacy Framework regulates personal data exchange between Switzerland and the US. It replaces the Swiss-US Privacy Shield, introducing enhanced protections and oversight. Companies ...
The LGPD covers Brazil's data protection law, its impact on organizations, and key developments. It explains compliance challenges and requirements. Organizations handling personal data in Brazil shou...
The NIST Cybersecurity Framework helps organizations manage cyber risks. It covers key components, including framework core and implementation tiers. Organizations seeking to improve cybersecurity sho...
Compliance and regulations are covered, including PCI DSS, HIPAA, and GDPR. These standards apply to various industries and businesses. Companies handling sensitive data should be aware of these regul...