Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
You Have One Year to Make GDPR Your Biggest Security Victory Ever
Newest First  |  Oldest First  |  Threaded View
<<   <   Page 2 / 2
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
5/29/2017 | 2:50:51 PM
HIPAA
I would think it would not be any more complex than HIPAA we had to go through here in US.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
5/28/2017 | 3:09:24 PM
DPO and "costl[iness]"
In my experience, the organizations that try to tack on data-privacy repsonsibilities to another, not directly related role and/or go cheap on this tend to do quite poorly with their privacy efforts -- especially as the person doing that job and several others for a very undermarket compensation level feels overwhelmed.

When it comes to compliance and risk management, you get what you pay for.
geriatric
50%
50%
geriatric,
User Rank: Moderator
5/26/2017 | 1:13:01 PM
What Authority Does a Foreign Entity Have on a Sovereign Nation?
There's been quite a bit of chatter on the GDPR, but to date, I haven't seen anyone address the fundamental question of just exactly how the EU could enforce a regulation on an entity not under their rule.

Why would the United States agree to comply with a foreign regulation? If that's the case, does an edict by Kim Jong-Un have the same weight of enforcement, and if not, why not?

Sara's article has a very valid point of using this event to strengthen our own security programs, but in the end, it's not for the EU to dictate how we protect our data.
Pablo Valerio
50%
50%
Pablo Valerio,
User Rank: Strategist
5/25/2017 | 5:36:43 PM
Going on different directions
Hi Sara, great article and summary of the upcoming GDPR requirements.

Looks to me that the EU and the US are going on opposite drections. The FCC is taking down privacy protections while the EU is increasing them.

It looks like Europe will play an important role in protecting privacy worldwide, as large corporations need to comply with the Regulation since they have "some" business in Europe.

And there will be no "grace" period after May 2018. In fact the GDPR is already in effect since May 2016. We are in the middle of the two-year grace period now!
<<   <   Page 2 / 2


COVID-19: Latest Security News & Commentary
Dark Reading Staff 5/28/2020
Stay-at-Home Orders Coincide With Massive DNS Surge
Robert Lemos, Contributing Writer,  5/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Can you smell me now?
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11844
PUBLISHED: 2020-05-29
There is an Incorrect Authorization vulnerability in Micro Focus Service Management Automation (SMA) product affecting version 2018.05 to 2020.02. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.
CVE-2020-6937
PUBLISHED: 2020-05-29
A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion.
CVE-2020-7648
PUBLISHED: 2020-05-29
All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. `#package.json`
CVE-2020-7650
PUBLISHED: 2020-05-29
All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json.
CVE-2020-7654
PUBLISHED: 2020-05-29
All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.