article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S. Location Matters.

article thumbnail

Customer Tracking at Ralphs Grocery Store

Schneier on Security

To comply with California's new data privacy law, companies that collect information on consumers and users are forced to be more transparent about it. More consumer protection laws will be required. Sometimes the results are creepy. Wait, it gets even better. We may need to change the wording on the form.".

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CSO's ultimate guide to security and privacy laws, regulations, and compliance

CSO Magazine

Health Insurance Portability and Accountability Act (HIPAA). Maryland Personal Information Protection Act – Security Breach Notification Requirements – Modifications (House Bill 1154). Massachusetts 201 CMR 17 (aka Mass Data Protection Law). 4806 — An Act relative to consumer protection from security breaches.

CSO 128
article thumbnail

CISA, SolarWinds up interest in security scoring

SC Magazine

Sachin Bansal, general counsel at SecurityScorecard, spoke with SC Media about ratings, and how they can be used to strengthen the supply chain, determine cyber insurance premiums and as an investigative tool for an oversight body. But what’s behind the numbers? What does CISA’s recommendation mean toward that goal?

article thumbnail

What is Maryland’s Online Data Privacy Protection Act?

Centraleyes

The measure prohibits the sale of sensitive data entirely, includes universal opt-out methods and anti-discrimination rules provisions, and provides a limited 60-day right to cure that expires in 2027. With MODPA, Maryland sets a precedent for prioritizing consumer privacy and data protection in the digital era.