Data Protection Archives

OCC Fines Capital One: Key Takeaways

August 11, 2020
Max Totsky
Banks, Breach prevention, Breach response, Cybercrime, Cybersecurity, Data Privacy, Data Protection, Financial Services, Uncategorized
0 Comments

Last year, Capital One experienced one of the largest-ever data breaches of a bank, when a hacker--Paige Thompson--got her hands on the personal information of over 106 million customers and applicants via a misconfigured AWS server. Now, the Office of…

How to Manage Third-Party Risk With Increased Number of Remote Workers

July 9, 2020
Max Totsky
Business Continuity, Compliance, COVID-19, Data Protection, Resilience, Third Party Compliance, Work from Home

Any compliance officer knows the importance of third-party risk management (TPRM)–and that keeping vendors in compliance with data privacy and protection laws is a continuous process. But, since the Covid-19 pandemic has forced most businesses to work remotely, overseeing vendor compliance has become much more difficult due to lack of a centralized operation. That’s in…

To access this post, you must purchase Student, Government or Professional.

Breaking Down the EasyJet Hack

June 9, 2020
Max Totsky
Breach prevention, Breach response, Data Protection, GDPR, Governance

Earlier this month, European budget airline EasyJet was hacked. In a “highly sophisticated attack,” 9 million customers had personal information, including email addresses and travel itineraries, compromised. And 2,208 customers had their credit card information stolen. The attack has left many customers “in limbo”, with many questioning how a company that claimed to comply with…

To access this post, you must purchase Student, Government or Professional.

Privacy Cages: The End of Data Privacy Laws?

June 3, 2020
Tim Crino
Data Privacy, Data Protection, Members Only

Evervault, a Dublin-based data privacy company has raised $16 million in its Series A funding round led by Index Ventures. This takes the total raised by the company to $19 million, giving it crucial resources to “build the API (application programming interface) for data privacy.” The company, founded by Shane Curran, has a simple manifesto:…

To access this post, you must purchase Student, Government or Professional.

What is Federated Learning? And How Can Differential Privacy Make it Better?

June 3, 2020
Tim Crino
Artificial Intelligence, Breach prevention, Data Mapping and Inventory, Data Privacy, Data Protection, Federated Learning, Machine Learning, Members Only, Uncategorized

Machine learning is a constantly growing technology. But some recent developments are particularly noteworthy for business leaders because they are paving the way for fairer, safer, more private, and more affordable machine learning algorithms. In 2017, Google announced that machine learning models trained with user interaction from mobile devices would adopt federated learning while, in…

To access this post, you must purchase Student, Government or Professional.

Complying with Data Privacy Law Lends a Competitive Advantage

May 6, 2020
Sowmya Kandregula
Data Privacy, Data Protection, Members Only, Privacy

Data governance and data privacy compliance almost always complement each other. When organizations are compliant with data privacy and security guidelines, it is likely because an effective data governance strategy is already in place. And the opposite is oftentimes also true. At the risk of oversimplifying these broad concepts, data privacy is about identifying and…

To access this post, you must purchase Student, Government or Professional.

Current Industry Regulations for Data Encryption: Are You Up to Date?

April 28, 2020
Max Totsky
CCPA, Data Protection, GDPR, Members Only

Though data is an incredibly valuable resource, more data generally means more responsibility. A larger amount of data presents a larger attack surface for hackers to target through cyberattacks. Encryption, the act of translating data into a new form that is undecipherable without a special key, is an impactful method of avoiding these issues and…

To access this post, you must purchase Student, Government or Professional.

Data Protection During a Global Crisis

As the deadly COVID-19 pandemic rages on, public and private entities alike rush to find a cure, a vaccine, and at the very least, methods for limiting the uncontrolled multiplication of the virus. But exploring every possibility must be balanced…

How to Establish Standardized Business Terms, A First Step in Data Privacy Compliance

April 1, 2020
Sowmya Kandregula
CCPA, Data Mapping and Inventory, Data Privacy, Data Protection, GDPR, Members Only

Technology and distributed work environments are making businesses and startups operate on a global scale. With the advent of new channels of communication comes a complex set of challenges, one of which is conflicting business terminology and naming conventions. This problem is especially evident in compliance departments as they struggle to make sense of proliferating…

To access this post, you must purchase Student, Government or Professional.