GRC Report Staff

Privacy Commissioner of Canada, Philippe Dufresne, released new guidance for organizations subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), laying out how businesses should assess the privacy practices of prospective third-party service providers. The guidance applies when an outside product, service, or technology will involve the collection, use, or disclosure of personal information, whether the provider is processing information directly, supplying technology that handles it, or working somewhere further down the chain.

Deloitte’s latest global cybersecurity survey begins with a number most CISOs would probably be pleased to see. Eighty-five percent of respondents say they are somewhat or very confident in their organization’s cybersecurity strategy.

Dompé has agreed to pay $32 million to resolve allegations that it used patient assistance foundations to cover Medicare beneficiaries’ co-pays for Oxervate, its prescription drug, turning what appeared to be charitable assistance into what federal authorities alleged were unlawful inducements to purchase the company’s product.

Online platforms operating under the UK’s online safety regime have until the end of September to show they can stop illegal intimate images from spreading. Ofcom is no longer waiting for the deadline to find out whether they are ready.

HelmGuard has raised $7.3 million in seed funding to expand its AI-driven approach to governance, risk and compliance, as the company looks to replace some of the questionnaires and periodic document reviews that still underpin corporate risk assurance with agents capable of examining evidence directly.

Regulatory compliance and cyber risk are driving third-party risk management strategies. Supply chain leaders, meanwhile, rank cybersecurity as their top perceived risk and managing risk and geopolitical uncertainty as their leading transformation objective. Companies are preparing to expand their partner networks and automate more of the work that holds those networks together. Their risk functions are not always keeping pace.

The Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) on Tuesday published two consultative documents aimed at financial market infrastructures, or FMIs, pairing a practical cyber resilience toolkit with a discussion paper examining the risks created by FMIs’ growing reliance on third-party service providers.