According to the General Data Protection Regulation (GDPR), an entity must have a "valid lawful basis" to process personal data. What does that mean? Trustwave offers these answers.
The California Consumer Privacy Act of 2018 will take effect January 1, 2020. The legislation resembles the European Union’s General Data Protection Regulation (GDPR). Here are the differences.
It is not enough for companies to establish policies & procedures designed to prevent the misuse of material nonpublic information. Companies must also enforce those policies & procedures. That’s the lesson from the SEC's recent settlement with Mizuho Securities USA.
Oregon’s amended data breach notification law has new requirements, prohibits fees for security freezes and adds a specific notification timing requirement, Hunton Andrews Kurth explains.
The first step toward GDPR (general data protection regulation) is to map or collect all the personal data of the company. What does that mean? ISACA explains.
The SEC's recent $35 million settlement over the Yahoo! data breach provides an object lesson in the consequences of failing to publicly disclose a major cyberattack.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
