Singapore passes law to tackle ‘foreign interference,’ giving authorities the power to block internet content

On October 5, Reuters reported: Singapore’s Parliament has approved a law giving broad powers to the government to deal with foreign interference — sparking concern from the opposition and experts about its wide scope and limits on judicial… Continue reading Singapore passes law to tackle ‘foreign interference,’ giving authorities the power to block internet content

NZ: Reserve Bank hit with compliance notice from Privacy Commissioner over data breach

Chris Keall reports: The Reserve Bank has suffered the ignominy of being the first organisation to be hit by a compliance notice under the new Privacy Act, which came into force in December last year. Privacy Commissioner John Edwards says an independe… Continue reading NZ: Reserve Bank hit with compliance notice from Privacy Commissioner over data breach

Ransomware Resources for HIPAA Regulated Entities

The HHS Office for Civil Rights (OCR) is sharing the following information to ensure that HIPAA regulated entities are aware of the resources available to assist in preventing, detecting, and mitigating breaches of unsecured protected health informatio… Continue reading Ransomware Resources for HIPAA Regulated Entities

FTC’s Health Breach Notification Rule — Wait, did you say “FTC’s???”

What does it say when a HIPAA lawyer with years of experience says he didn’t know the FTC has a health breach notification rule? Seen on Jeff Drummond’s blog: ” The U.S. Federal Trade Commission issued a policy statement this week con… Continue reading FTC’s Health Breach Notification Rule — Wait, did you say “FTC’s???”

Office of the Privacy Commissioner for Bermuda Issues Data Breach Guide

Odia Kagan of Fox Rothschild writes: The Office of the Privacy Commissioner for Bermuda has issued a helpful guide on the various types of harm that could be caused by a data breach. The office also referred to the Future of Privacy Forum research on p… Continue reading Office of the Privacy Commissioner for Bermuda Issues Data Breach Guide

FTC Warns Health Apps and Connected Device Companies to Comply With Health Breach Notification Rule

The Federal Trade Commission today issued a policy statement affirming that health apps and connected devices that collect or use consumers’ health information must comply with the Health Breach Notification Rule, which requires that they notify consum… Continue reading FTC Warns Health Apps and Connected Device Companies to Comply With Health Breach Notification Rule

Education Department Updates Rules and Criminal Penalties for Accessing Agency Data

Aaron Boyd reports: The Education Department is rolling out new rules for accessing and handling agency data by third parties—including students, parents and loan companies—with updated criminal penalties for anyone not following the new statutes. The … Continue reading Education Department Updates Rules and Criminal Penalties for Accessing Agency Data

Industry lobbies Congress to extend notification timeline after cybersecurity incidents

Maggie Miller reports: Key industry groups on Wednesday pushed to give organizations at least three days to report cybersecurity incidents to the federal government, effectively opposing Senate legislation that would give them 24 hours to report breach… Continue reading Industry lobbies Congress to extend notification timeline after cybersecurity incidents