NYDFS settles with EyeMed for $4.5 million
Posted in Cybersecurity, Data breachTag archives: over-retention
Posted in Cybersecurity, Data breachAnother fine for over-retention of data
Posted in Compliance and risk management
A third regulator has recently entered into a proposed consent that includes a $500,000 fine based in part on a company’s over-retention of personal data for longer than it was needed. The first regulator was the French data protection authority, the CNIL, in 2021, which we wrote about here. The second regulator was the New … Continue reading
Over-retention of personal data
Posted in Compliance and risk management
The declining cost of electronic data storage may have caused some company executives to conclude that retaining personal data forever is “cheap.” Perhaps the CNIL’s €1.75 million (USD $2,051,930) penalty for over-retention will lead to a different view. The matter involved one of France’s largest insurers, SGAM AG2R LA MONDIALE, which was subject to an … Continue reading
