PHILADELPHIA, April 5, 2018 /PRNewswire/ -- NetDiligence®, a leading provider of cyber risk readiness and response services, announced today it has published Spotlight Healthcare, data-driven analysis of cyber risk insurance claims in the healthcare sector, as an addendum to the company's 2017 Cyber Claims Study.
EU regulators seek to mandate accountability
In the race to compete in today's digital world, organizations are using social, mobile, big data and analytics, and the Internet of Things (IoT) to gather as much information on their customers as possible, while simultaneously trying to do everything possible to protect their organizations from cyber attacks that come from the outside and within. In this environment, privacy protection can become an afterthought, bolted on to information security programs in an ad hoc manner. Or worse case, organizations haven't thought about privacy protection at all.
For years, regulators and privacy commissions around the world have attempted to legislate privacy protection and develop privacy standards, such as Privacy by Design (PbD) for organizations to adhere and adopt. However, even as regulators pushed accountability, many organizations saw it as more voluntary than mandatory. They were content to address the letter of the law outlined in the legislation as opposed to its spirit - to meet minimal compliance obligations without taking responsibility for their role in protecting their customers' or employees' information.
With the introduction of the European Union's General Data Protection Regulation (GDPR), and the implications for organizations across the globe, the days of organizations leaving the responsibility for privacy protection to someone else is about to end. The EU's GDPR puts the onus of privacy protection where it should be - in the hands of the entities collecting, storing, analyzing and managing personally identifiable information.
Download the Report
Adoption of the new General Data Protection Regulation (GDPR) is motivating organizations worldwide to improve existing technical controls for securing personal information. Organizations should be especially aware that the GDPR and other recent legal developments amplify the negative repercussions of a data security breach - meaning organizations...
1. Prepare a data map, which is a report on what personal data the company processes throughout its organization, where that data flows throughout the organization, where it is stored, who within the organization is responsible for it, what it is used for, and with whom is it shared. This includes both personal data of the company's employees...