Micah Howser ponders the inherent privacy risks of voice-activated devices and why touchless isn’t worth the convenience.

What will regulators be focused on in the near and medium-term future? Attorney Phil Yannella breaks down some of the immediate issues in data privacy legislation and regulation.

With new laws popping up across the country biometric data protection is a hot topic in privacy liability. We talked to attorney Ernest Koschineg about the current landscape and what we can expect to see in this space in the coming months.

A Q&A with Karl Sigler of Trustwave The Secret Service estimates that there have been over 1,000 data breaches at point-of-sale (POS) systems via Backoff malware. I asked Karl Sigler, Threat Intelligence Manager of Trustwave and a member of the team that initially identified Backoff to explain this insidious malware and why retailers should be…

A Q&A with Hans Allnutt of DAC Beachcroft, LLP Adopted in May, the sweeping General Data Protection Regulation (GPDR) replaces the EU’s long-outdated Directive 95/46/EC. The privacy regulation, which takes effect after a two-year transition period, calls for steeper sanctions and fines for violations. To find out more about what its adoption will mean for risk…

A Q&A with Dominic Paluzzi McDonald Hopkins In late January 2015, the White House introduced the Personal Data Notification and Protection Act (PDNPA), a data breach notification bill, intended to improve national cybersecurity. I asked attorney and breach coach Dominic Paluzzi of McDonald Hopkins about how this bill differs from the existing laws and its…

A Q&A with Christopher Watson
The IRS Safeguards Program was designed to ensure that federal, state and local agencies properly protect federal tax information, and the requirements cover computer security, among other things. I spoke with Christopher Watson, senior manager of internal audit and risk advisory services at Schneider Downs & Co. in Columbus, OH, to find out more about the Program and what it entails.

A Q&A with Joseph Loomis of CyberSponse An ongoing challenge for any organization trying to enforce cyber security is the constant stream of new exploits, all of which rely on a lack of awareness about particular vulnerabilities. In the face of the recent seemingly “black swan” attack on JP Morgan, I asked Joseph Loomis, founder…

A Q&A with Greg Wasson of ICSA Labs
The term zero-day malware refers to threats that take advantage of existing but unknown (to the owner or developer) loopholes in the system. I spoke to Greg Wasson, program manager at ICSA Labs, about zero-day vulnerabilities and the risks they pose for companies.

A Q&A with Darren Guccione, Keeper Security All too often data breaches arise from insufficient employee passwords—yet improving password security is an easy fix for most organizations to make. Darren Guccione, CEO and cofounder of Keeper Security, which offers password management software as a service, says that companies should be using the technology at their…