Storage Wars: The Pros and Cons of Data Localization

Storage Wars: The Pros and Cons of Data Localization/Nationalization

Countries are pushing towards data localization to protect their citizens’ data in the connected world. Also known as data nationalization, the interest stems from countries wanting to ensure the cybersecurity and privacy of their citizens’ personal information from global companies and foreign governments, especially adversaries. Nations seek to establish virtual borders and retain legal control…

Staying in the Clear: Employee and B2B Data Obligations in CCPA

Focus and Context The California Consumer Privacy Act (“CCPA”) and the potential amendment California Privacy Rights Act (“CPRA”) are consumer-focused legislations. CCPA provides for two exemptions, one for employee personal information and another for business-to-business organizations (“B2B exemption”) thus, leaving holes to be filled by a future employee and B2B focused legislation. The exemptions were…

Ardent Privacy selected for MAVA forefront2020 cohort.

Ardent Privacy selected for MAVA forefront2020 cohort.

MAVA ANNOUNCES LINEUP OF EARLY-STAGE COMPANIES JOINING FOREFRONT 2020 INDUSTRY PROGRAM FOCUSED ON ECONOMIC RECOVERY, CAPITAL INVESTMENT, AND INCLUSION Coupled with Leading Industry Speakers, Lineup of 35 Competitively-Selected Startups Represent Broad Range of Industry Sectors Washington, D.C. – September 16, 2020 – MAVA will host its inaugural Forefront 2020 virtual business conference on September 22 –…

NYCRR 500: New York’s Cybersecurity Requirements for Financial Services

  Introduction In the aftermath of the multiple data breaches, the New York Department of Financial Services (DFS) created 23 NYCRR 500 establishing cybersecurity requirements for financial services companies. Effective March 1, 2017, this regulation is designed to promote the protection of customer information as well as the information technology systems of regulated entities. The…

Delaware Insurance Data Security Act Summary

Delaware’s Insurance Data Security Act (the “Act”) requires all regulated insurance companies licensed in Delaware to follow new data security and notification requirements. This article summarizes Delaware’s adaptation of the NAIC Insurance Data Security Model Law. Mission: To protect Delaware residents and insurance companies licensed to do business in Delaware from data breaches. The law requires…

Indiana Insurance Data Security Amendment to State Insurance Code

Effective July 1, Indiana added a new section to the Indiana Insurance Code (the “Act”) that covers Insurance Data Security. The changes require all regulated insurance companies licensed in Indiana to follow new data security and notification requirements. This article summarizes Indiana’s adaptation of the NAIC Insurance Data Security Model Law into the state insurance code.…