New York Fines Delta Dental Over $2 Million for Data Retention and Breach Response Failures
Updated
Updated · Computerworld · Jun 5
New York Fines Delta Dental Over $2 Million for Data Retention and Breach Response Failures
2 articles · Updated · Computerworld · Jun 5
Summary
More than $2 million in penalties hit Delta Dental Insurance Company after New York regulators found failures in data retention enforcement, incident response procedures and breach notification.
MOVEit Transfer settings could be shortened, extended or disabled folder by folder or file by file, but the company had no written process for requesting, reviewing or approving those retention changes.
Regulators said that weak enforcement mattered because data covered by Delta Dental's own retention rules could have been deleted before attackers accessed it.
The case underscores a broader compliance risk: regulators are increasingly punishing companies not just for weak policies, but for failing to follow the data-handling and disclosure rules they publicly claim to enforce.