Clash of Compliance Cultures: Old vs. New World

In the last few years, US companies have not been shy about expressing their feelings on the EU’s Data Protection Directive (DPD). There’s a major social media player, for example, with a European HQ in Ireland that’s been publicly critical of a proposed “right to be forgotten” rule for letting consumers delete their online data….

Continue Reading

Is DNA Really Personally Identifiable Information (PII)? No. Maybe? Yes!

Biometric data is at the limits of what current personal data privacy laws consider worthy of protection. This type of identifier covers fingerprints, voiceprints, and facial images. While the risk factors are not nearly as threatening to consumers as more traditional PII, they do exist. Until recently, the dangers of biometric identification using DNA were…

Continue Reading

HIPAA’s New Rules Reach Far Beyond Healthcare Providers – Are You Impacted?

Two weeks ago, the Department of Health and Human Services (HHS) issued final regulatory rules that place a new group of data processors and third-party consultants directly under HIPAA’s data security compliance regulations. Some Background In 2010, HHS issued a “notice of proposed rulemaking”, seeking comments from stakeholders as it worked out updated regulations for…

Continue Reading

Report: Nearly Half of IT Staff Fear Unauthorized Access To Virtual Servers

There are reportedly over 50 million VMs residing on servers.  Varonis surveyed IT staff at VMWorld San Francisco and VMWorld Barcelona in 2012 to answer questions about VM adoption, saturation, use cases, deployment, security and more. Virtualization yields countless benefits.  Our results show that 76% of respondents use VMs for fast deployment, 74% cite disaster…

Continue Reading

Determining the Root Cause of a Data Breach With “The 5 Whys”

The jarring sound of an iPhone vibrating against a mahogany nightstand at 3:15am.  This can’t be good.  Server down?  Much worse: 50,000 sensitive files have been stolen from a poorly permissioned file server.  First, damage control.  Next, investigation. Problem: 50,000 files were stolen. Why?  The files were accessible to everyone in the company, even guests….

Continue Reading

The ECPA Puts Your Cloud Data at Risk

Today we live in a highly collaborative environment.  People expect to be able to collaborate wherever they are – on the couch with their iPad, in the office, or on a smartphone at 30,000 feet.  As a result, we have seen cloud based file-sharing explode over the last few years.  The promise, of course, is…

Continue Reading

BYOD (Bring Your Own Device) Workplace Survey. Win the new iPad mini.

Workplaces across the globe are letting employees bring their own devices to work, allowing them to access sensitive company data from personal hardware. At Varonis, we’re always striving to keep up with the very latest trends in BYOD and workplace collaboration, and how they impact IT. What better way to learn the latest on BYOD…

Continue Reading

The New Privacy Data Vaults: Trustworthy, Accessible Info Banks

Data brokers have been in the news recently. In addition to the FTC inquiry into their practices, there are now several startups looking to disrupt their business model. While today’s data brokers operate below the radar, this new breed of personal information collectors is seeking more transparency and public acceptance. Their approach is heavily dependent…

Continue Reading

From the HIPAA Case Files: Jail Time, Fines, and Access Rights

While I was conducting some research on compliance laws for a customer, I found myself reviewing the penalties written into the 1996 Health Information Portability and Accountability Act, otherwise known as HIPAA. The act calls for health organizations “to maintain reasonable and appropriate administrative, physical, and technical safeguards to ensure the integrity and confidentiality of…

Continue Reading

An Enterprise VP Engineering’s Thoughts on Developing Software for the Mac

Varonis’ VP of Engineering David Bass shared his thoughts and opinions on the Mac development ecosystem and how it compares to Windows and .NET.  David and his team recently developed a Mac client for the company’s popular new DatAnywhere product – a secure, private cloud file sync alternative to Dropbox. Q: Why did Varonis decide…

Continue Reading