Case Detail

Back to Search Results View Images Request Certification

PIF Number:
3646
Case Name:
In re Carnival Corporation
Supplier:
Carnival Corporation
Case Number:
00
Date in Pif:
7/5/2022
Court:
County:
Keywords:
Statute Cites:
Rules & Regulations:
Subject Matter:
Privacy
Category:
Data Breach
Sub-Category:
Issue Summary:
Supplier agrees to comply with all State Consumer Protection Acts and Security Breach Notification Acts. Supplier to institute enhanced data security measures and shall implement and maintain an Information Security Program. Supplier to develop and implement policies and procedures for the following areas: 1) data retention and disposal, 2) e-mail security awareness, 3) e-mail filtering and phishing solutions, 4) encryption, 5) logging and monitoring, 6) access control and account audits, 7) password management, 8) multi-factor authentication, 9) firewalls, 10) penetration testing, 11) risk assessment program, and 12) endpoint detection and response. Supplier to pay $1,250,000 to the participating states. [EDITOR'S NOTE: See agreement for all terms]