Canada’s mandatory breach reporting under PIPEDA takes effect
1 Nov 2018
Canadian organisations must now report breaches creating a real risk of significant harm and keep records of all breaches.
Insights for North, Central, and South America, and the Caribbean.
Canadian organisations must now report breaches creating a real risk of significant harm and keep records of all breaches.
Argentina’s AAIP publishes Resolution 47/2018 setting recommended security measures for processing personal data.
South Dakota’s breach notification law takes effect, meaning every US state now requires notification of personal data breaches.
The US Clarifying Lawful Overseas Use of Data (CLOUD) Act has become law, with implications for data held by US providers outside the US.
A ransomware attack disrupted Atlanta’s city services for weeks, with recovery costs reported in the millions of dollars.
An Uber self-driving test car struck and killed a woman in Tempe, Arizona, the first pedestrian death involving an autonomous car.
Reports revealed that data on tens of millions of Facebook users had been collected through a quiz app and used for political targeting.
US insurance regulators have adopted a model law requiring insurers to maintain security programmes and report cyber events within 72 hours.
Credit agency Equifax disclosed a breach that exposed personal data of around 143 million Americans and millions in the UK and Canada.
US and European police shut down AlphaBay and Hansa, two of the largest dark web markets, in a co-ordinated operation.
WikiLeaks released thousands of documents it said described CIA tools for hacking phones, computers, and smart TVs.
New York’s financial regulator now requires banks, insurers and other regulated entities to maintain a cybersecurity programme and appoint a CISO.