Complying with CPRA: A Brief Overview for Business Leaders

By |2024-09-09T17:27:08-04:00August 29th, 2024|article, Blog Archive, Data Compliance, Privacy|

The California Privacy Rights Act (CPRA) took effect in January 2023, replacing the California Consumer Privacy Act (CCPA) and providing consumers with unprecedented rights over their personal information. For businesses, complying with CPRA means upholding a new standard of transparency and accountability. This guide will help. NOTE: This overview is intended to provide a general understanding of how to achieve CPRA compliance. For specific legal advice, consult with a qualified attorney or privacy expert. First, know whether the law applies to your business. Businesses that collect or process personal information of California residents and meet one or more of the

Comments Off on Complying with CPRA: A Brief Overview for Business Leaders

9 Best Practices to Prevent a HIPAA Breach and Preserve Patient Privacy

By |2024-08-21T19:34:58-04:00August 21st, 2024|article, Blog Archive, Data Compliance, Privacy|

The Health Insurance Portability and Accountability Act (HIPAA) sets a high bar for protecting sensitive patient data. While no method can guarantee complete safety, incorporating several key strategies will significantly reduce risks and help to prevent a HIPAA breach. Lay a Strong Foundation Preventing HIPAA data breaches begins with incorporating basic practices designed to reduce vulnerabilities and strengthen the data environment. Regular risk assessments Typically, a risk assessment begins with an inventory of protected health information (PHI), as well as of the information systems that support this data. It also includes the processes, policies, and security controls that determine data

Comments Off on 9 Best Practices to Prevent a HIPAA Breach and Preserve Patient Privacy

Role of Data Privacy in Data Analysis Critical to Proactive Business Strategy

By |2024-08-26T14:41:32-04:00August 14th, 2024|article, Blog Archive, Privacy|

Data analytics has emerged as an essential component of business success, driving efficiency and innovation. On the one hand, today’s regulatory environment appears to place obstacles in the way of companies seeking to capitalize on the promise of big data. But savvy business leaders understand the critical role of data privacy in data analysis. At its core, data privacy involves proper treatment of sensitive data. This certainly entails keeping data secure. But it also necessitates respecting the right of individuals to control how their personal information is used and shared online. And it requires transparency about data handling practices. Maintaining

Comments Off on Role of Data Privacy in Data Analysis Critical to Proactive Business Strategy

Prepare Now for Data Privacy Law Changes in 2024

By |2024-04-02T11:23:11-04:00December 6th, 2023|Data Compliance, Information Governance and Management, Privacy|

The privacy legislation trend shows no signs of slowing down. At least a dozen states have now enacted privacy laws, in addition to global laws already in place. And more states will inevitably pass privacy legislation in the coming year. Organizations should plan carefully to prepare for data privacy law changes in 2024 and beyond. New State Privacy Laws Taking Effect in 2024 Each year, a handful of states enact sweeping privacy legislation, and 2024 is no exception. The following new privacy laws will take effect in the coming months: Montana Consumer Data Privacy Act (MTCDPA) – This law goes

Comments Off on Prepare Now for Data Privacy Law Changes in 2024

Data Ethics and Responsibility Build Trust, Efficiency, and Competitive Advantage

By |2024-04-02T11:18:49-04:00November 21st, 2023|Data Compliance, Information Governance and Management, Privacy|

Data ethics and responsibility refer to the practice of using data in a fair, transparent, accountable, and trustworthy manner. Treating data responsibly extends far beyond simply achieving regulatory compliance. It involves carefully considering the impact of data on individuals and society. While it brings important business benefits, it requires strategy. For example, a university conducting social research on issues surrounding indigenous peoples has a responsibility to respect the cultural values of the indigenous community. This will involve first obtaining informed consent from the community and individuals involved. It also requires taking steps to ensure fairness and cultural accuracy in data

Comments Off on Data Ethics and Responsibility Build Trust, Efficiency, and Competitive Advantage

What US Businesses and Individuals Need to Know About GDPR Compliance

By |2024-04-03T10:57:31-04:00November 1st, 2023|Data Compliance, Privacy|

The General Data Protection Regulation (GDPR) took effect in 2018, increasing data protection for European Economic Area (EEA) citizens and residents. The GDPR impacts how organizations collect, process, store, and share personal data. While the law applies to individuals in the EEA, GDPR compliance also affects American citizens and businesses in certain situations. Failure to comply with GDPR can result in hefty fines, as well as reputational damage and legal action. For instance, Facebook’s parent company Meta was fined $1.3 billion this year for violating GDPR guidelines. Companies need to understand whether they fall under GDPR and how to achieve

Comments Off on What US Businesses and Individuals Need to Know About GDPR Compliance

Daniel’s Law Highlights the Need to Redact Public Records

By |2023-07-28T07:34:38-04:00June 7th, 2023|Information Governance and Management, Privacy|

Daniel's Law refers to laws in different states that protect the personal information of public servants and their families from being disclosed or published online. The original Daniel's Law, enacted in New Jersey in 2021, was inspired by the tragic death of Daniel Anderl, the son of Judge Esther Salas and Mark Anderl. Daniel’s Law illustrates the need for data privacy and sensitive and informed municipal data governance. What is Daniel's Law in New Jersey? Daniel's Law (P.L. 2021, c. 371) was signed by Governor Phil Murphy on January 19, 2021, in response to the fatal shooting of Daniel Anderl.

Comments Off on Daniel’s Law Highlights the Need to Redact Public Records

Email Compliance Tips to Avoid Penalties and Preserve Goodwill

By |2023-04-27T09:47:55-04:00April 26th, 2023|Email Management Tips, Privacy|

Email remains an essential tool for business communication. Workers use it to connect with vendors and colleagues. And email marketing presents a cost-effective way to stretch advertising dollars and strengthen customer relationships. However, to avoid penalties and preserve customer goodwill, organizations must ensure email compliance. Companies should be aware of several laws affecting email. For instance, the CAN-SPAM act regulates marketing emails in the United States, with even stiffer laws in Canada. The FTC will levy costly fines and penalties against companies who violate CAN-SPAM. In addition to CAN-SPAM, a growing number of states have begun implementing privacy laws that

Comments Off on Email Compliance Tips to Avoid Penalties and Preserve Goodwill

Don’t Let 2023 Privacy Law Changes Surprise You

By |2024-03-12T15:17:12-04:00January 4th, 2023|Data Compliance, Privacy|

The wave of privacy regulations continues to gain momentum, with five states enacting new laws this coming year. The 2023 privacy law changes will affect the data operations of thousands of organizations. And business owners should expect even more changes to come. Solid, adaptable data governance will help companies maintain compliance. California 2023 Privacy Law Changes The California Privacy Rights Act takes effect on January 1. It replaces California’s original privacy law, the CCPA, and grants additional rights to Californians. CCPA granted consumers the right to a privacy notice, the right to delete their data and the right to opt

Comments Off on Don’t Let 2023 Privacy Law Changes Surprise You

Legacy Archive Migration Best Practices for a Smooth Transition

By |2023-03-08T13:53:16-05:00December 21st, 2022|Email Migration, Privacy|

For decades, organizations have been archiving emails to meet regulatory and business requirements. In many cases, this means that companies have millions of emails stored in outdated systems. Updating archives to take advantage of the benefits of a modern environment can prove complicated. But following legacy archive migration best practices help. Email archiving provides a way for companies to preserve emails indefinitely. Archiving often proves necessary to achieve regulatory compliance. It also provides for business continuity and plays a key role in eDiscovery and internal audits. Several scenarios may necessitate the need to migrate email archives. For example, as more

Comments Off on Legacy Archive Migration Best Practices for a Smooth Transition
Go to Top